Privacy Policy

1. Who is responsible

Hristijan Talevski, sole trader registered in North Macedonia, operating chainsignal.dev, is the data controller for the personal data described here. Contact: support@chainsignal.dev.

2. What we collect

If you use the Service without an account: your IP address, used only to apply a daily scan limit. It is stored as a salted one-way hash — we cannot recover the original address from it — and buckets are short-lived.

If you create an account:

• Email address (for sign-in, service email, and account notices)
• Authentication data handled by our provider (we never see or store your password in plain text)
• The tokens you scan and the tokens you add to your watchlist
• Usage counters (scans and AI explanations used, for enforcing plan limits)
• Your Telegram chat ID, only if you choose to connect Telegram for alerts

If you subscribe: payment is handled by Creem. We do not receive or store your card details. We receive confirmation of your subscription status, plus the Creem customer and subscription identifiers we need to keep your plan in sync and to open your billing portal.

We do not ask for, receive, or store wallet addresses, private keys, or seed phrases. ChainSignal never requires a wallet connection.

3. Why we use it

• To provide the Service and keep you signed in
• To enforce plan limits fairly
• To generate and deliver the alerts you asked for
• To handle billing and support
• To prevent abuse of an openly accessible service
• To fix problems and improve the product

Our legal bases are: performing our contract with you (providing the Service you signed up for), our legitimate interests (security and abuse prevention), your consent (Telegram alerts, which you initiate and can disconnect), and legal obligations (tax and accounting records).

4. Who we share it with

We use these processors and services, and share only what each needs:

• Supabase — database, authentication, and backend hosting (EU region)
• Netlify — website hosting
• Creem (Armitage Labs OÜ, Estonia) — payments, as Merchant of Record; Creem is a controller for payment data
• Telegram — delivery of alerts, only if you connect it
• Anthropic — the AI explanation feature; when you request one, the token report is sent for processing. It contains no personal data about you.
• Helius, Birdeye, DexScreener, and other blockchain data providers — we send them token addresses, never your personal data

We do not sell your personal data, and we do not use it for advertising.

5. How long we keep it

Account data is kept while your account exists. If you delete your account, we delete your personal data within 30 days, except records we must retain for tax and accounting. Anonymous rate-limit hashes are kept only days. Alert history is kept while your account exists so you can see what we sent you.

6. Your rights

You can request access to your data, correction, deletion, a portable copy, or restriction of processing, and you can object to processing based on legitimate interests. You can withdraw consent for Telegram alerts at any time by disconnecting Telegram in your account.

Email support@chainsignal.dev to exercise any of these. If you are in the EU/EEA and think we have handled your data wrongly, you can complain to your national data protection authority.

7. Cookies

We use only what is necessary to keep you signed in and to operate the site. We do not use advertising or cross-site tracking cookies.

8. International transfers

Some of our providers are outside North Macedonia and the EU. Where that is the case, we rely on the provider’s standard contractual clauses or equivalent safeguards.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

We will post updates here and change the date above. Material changes will be notified by email.