Draft for review. Not yet in effect.

Privacy policy

Effective [launch date]. Last updated [date].

LimitX is a web app (app.limitxapp.com) and service for placing limit orders and price ladders, starting on Robinhood Chain. It is built and run by an independent team of contributors ("the LimitX team", "we"). This policy explains what we collect, why, who we share it with and how long we keep it. Questions: support@limitxapp.com.

The short version

• LimitX never holds your funds, your private keys or your seed phrase. Your wallet signs everything.
• We know your wallet address and the orders you place, because we need them to run your orders.
• We don't ask for your name or email, we don't use advertising or tracking, and we don't sell data.
• Anything that happens on the blockchain is public and permanent, by the nature of blockchains.

What we collect, and why

• Your wallet address, when you sign in by signing a message with your wallet. It identifies your account and your orders.
• Your orders: the tokens, amounts, prices, expiry, your signatures, their status, and the transactions that filled them. We need these to watch prices, alert you, execute auto orders and show your history.
• Telegram, only if you link it: your Telegram chat ID, so we can send you alerts. Amounts are left out of messages unless you turn them on. You can unlink at any time.
• Technical data: your IP address and request details, used to limit abuse (rate limits) and kept in our server logs, and error reports from the app when a safety check stops a signing request.

The app also keeps some data only on your device, in your browser's storage: your sign-in session, that you agreed to these terms, a copy of the terms of each order you placed (so it can check every signing request against what you set), and your settings. We don't receive that copy.

Who we share it with

We don't sell or rent your data. To run the service, data goes to these providers:

• Uniswap Labs (the Uniswap Trading API): order details, to price, route and submit swaps.
• Robinhood Chain's public node and Blockscout (the chain's explorer): your wallet address, to read balances, token holdings and transactions.
• GeckoTerminal and GoPlus Security: token addresses (not your wallet), for prices and token safety scans.
• Telegram: alert messages, if you linked it.
• Microsoft Azure (hosting, database and logs) and Cloudflare (hosting the app, network security, and Turnstile, a check when you sign in that you're a person and not a bot, which looks at your browser and connection), which process our traffic and data on our behalf.

We may also disclose information when the law requires it.

How long we keep it

• Server logs: 30 days.
• Sign-in sessions: removed a day after they expire.
• Orders and their history: while you use LimitX, so your history stays available. Ask us to delete them at any time.
• Telegram link: until you unlink it.

Your choices and rights

• Disconnect your wallet or unlink Telegram from the app at any time.
• Email support@limitxapp.com to see or delete what we hold for your wallet. We can't change or delete anything recorded on the blockchain.
• Depending on where you live, you may have rights to access, correct, delete or move your data, or to object to how it's used. Email us and we'll help.

Security

Data is encrypted in transit, secrets are kept in a key vault, and access is limited. No system is perfectly secure, so we never ask for, and you should never share, your seed phrase or private keys.

Children

LimitX is not for anyone under 18.

Changes

We'll update this page when the policy changes, and change the date above.