Privacy Policy

1. Information We Collect

We collect minimal information necessary to provide our service:

• Bitcoin public keys and addresses (for authentication and NFT delivery)
• API usage statistics (for rate limiting and analytics)
• On-chain transaction data (public blockchain data)
• Session tokens (for maintaining logged-in state)
• Contact details and messages you voluntarily submit for support

2. What We Don't Collect

We prioritize your privacy:

• We never store private keys or seed phrases
• We don't require an email address to connect a BSV wallet
• We don't use tracking cookies or analytics beyond basic usage metrics
• We don't sell your personal data

3. Bitcoin-Based Authentication

We use Sigma Auth for Bitcoin signature-based authentication:

• Authentication is based on Bitcoin signatures (BRC-77)
• Your identity is your Bitcoin public key
• Private keys never leave your device
• Sessions are maintained via secure tokens

4. How We Use Your Information

Information collected is used solely for:

• Verifying NFT ownership for API access
• Preparing and saving token launch details
• Connecting an authenticated identity to its chosen wallet
• Providing customer support
• Improving our service

5. Blockchain Data

Tokens and transactions that a user approves are recorded on the Bitcoin SV blockchain:

• Blockchain data is public and permanent
• NFT ownership is publicly verifiable
• Transaction history is transparent
• We cannot delete blockchain records

6. Wallet and Indexing Services

Wallet and blockchain indexing providers process the requests you direct to them:

• Your wallet handles keys, approvals, and transaction signing
• Blockchain indexers return public transaction and token data
• Those providers apply their own privacy policies

7. Data Storage

We store minimal data in secure infrastructure:

• Session data stored in Redis with expiration
• Order history stored in PostgreSQL
• NFT verification cached temporarily
• All data encrypted in transit and at rest

8. Your Rights

You have full control over your data:

• Access your data at any time through the dashboard
• Request an export of account information we store
• Request account deletion (blockchain data remains)
• Transfer NFT ownership at any time

9. Security

We implement industry-standard security measures:

• HTTPS encryption for all communications
• Secure session management
• Rate limiting to prevent abuse
• Regular security audits

10. Third-Party Services

We integrate with minimal third-party services:

• Sigma Auth for authentication
• Resend for contact and transactional email
• Droplit for free tier transaction funding
• BSV blockchain nodes for NFT verification
• 1sat.market for marketplace integration

11. Changes to Privacy Policy

We may update this privacy policy from time to time. Continued use of the service constitutes acceptance of the updated policy.

Contact

For privacy-related questions, email us at hello@mintflow.me.