MINTFLOW

Privacy Policy

Last updated: January 2025

1. Information We Collect

We collect minimal information necessary to provide our service:

  • Bitcoin public keys and addresses (for authentication and NFT delivery)
  • API usage statistics (for rate limiting and analytics)
  • On-chain transaction data (public blockchain data)
  • Session tokens (for maintaining logged-in state)

2. What We Don't Collect

We prioritize your privacy:

  • We never store private keys or seed phrases
  • We don't require traditional email addresses or personal information
  • We don't use tracking cookies or analytics beyond basic usage metrics
  • We don't sell or share your data with third parties

3. Bitcoin-Based Authentication

We use Sigma Auth for Bitcoin signature-based authentication:

  • Authentication is based on Bitcoin signatures (BRC-77)
  • Your identity is your Bitcoin public key
  • Private keys never leave your device
  • Sessions are maintained via secure tokens

4. How We Use Your Information

Information collected is used solely for:

  • Verifying NFT ownership for API access
  • Enforcing rate limits and usage quotas
  • Minting and delivering subscription NFTs
  • Providing customer support
  • Improving our service

5. Blockchain Data

All subscription NFTs and transactions are recorded on the Bitcoin SV blockchain:

  • Blockchain data is public and permanent
  • NFT ownership is publicly verifiable
  • Transaction history is transparent
  • We cannot delete blockchain records

6. Droplit for Free Tier

Free tier users utilize droplit for subsidized transactions:

  • Droplit funds BSV transactions on your behalf
  • We track on-chain data usage per user
  • Usage data is stored temporarily for quota enforcement
  • Droplit has its own privacy policy for cloud wallet services

7. Data Storage

We store minimal data in secure infrastructure:

  • Session data stored in Redis with expiration
  • Order history stored in PostgreSQL
  • NFT verification cached temporarily
  • All data encrypted in transit and at rest

8. Your Rights

You have full control over your data:

  • Access your data at any time through the dashboard
  • Export your subscription history
  • Request account deletion (blockchain data remains)
  • Transfer NFT ownership at any time

9. Security

We implement industry-standard security measures:

  • HTTPS encryption for all communications
  • Secure session management
  • Rate limiting to prevent abuse
  • Regular security audits

10. Third-Party Services

We integrate with minimal third-party services:

  • Sigma Auth for authentication
  • Droplit for free tier transaction funding
  • BSV blockchain nodes for NFT verification
  • 1sat.market for marketplace integration

11. Changes to Privacy Policy

We may update this privacy policy from time to time. Continued use of the service constitutes acceptance of the updated policy.

Contact

For privacy-related questions, please contact us through our contact page.