Indicator Design Studio Privacy Policy

Last Updated: 2026-05-19

Version: privacy-v1.0-beta

This Privacy Policy explains how Indicator Design Studio (the "Platform", "we", "us") collects, uses, stores, and protects personal data.

1. Scope

This Policy applies to personal data processed through:

1. the Platform web application and website;
2. API services and user accounts;
3. wallet authentication and related security flows;
4. support, billing, and referral functionality.

2. Data We Process

Depending on usage, we may process:

1. Account and identity data: wallet address, session identifiers, authentication metadata.
2. Contact and support data: email/contact handles, support messages, ticket metadata.
3. Technical data: IP address, user agent, device/browser data, logs, request metadata.
4. Product usage data: strategy/runtime settings, feature usage, page events, analytics events.
5. Billing and referral data: subscription state, charge history, ledger records, referral metrics, payout status.
6. On-chain public data: blockchain transaction hashes, token events, contract interaction metadata.
7. Compliance and abuse-prevention data: fraud signals, rate limit/security events, risk flags.

We do not intentionally collect sensitive personal data unless required for legal compliance or support resolution.

3. Purposes of Processing

We process data to:

1. provide and operate the Platform;
2. authenticate users and secure accounts;
3. deliver billing, referral, and service-credit features;
4. detect abuse, fraud, and security incidents;
5. maintain service reliability and troubleshoot issues;
6. comply with legal obligations;
7. improve product quality and user experience.

4. Legal Bases (GDPR-Oriented)

Where GDPR or similar laws apply, we rely on one or more legal bases:

1. Performance of a contract (service delivery, account access, billing).
2. Legitimate interests (security, abuse prevention, reliability, analytics).
3. Consent (where required, e.g., optional analytics cookies/marketing).
4. Legal obligation (compliance, sanctions, law-enforcement requests).

5. Cookies and Tracking

We use cookies and related technologies for:

1. essential session/authentication functions;
2. security and anti-abuse;
3. analytics and product improvement (where permitted).

See the Cookie Policy for details.

6. Data Sharing

We may share data with:

1. infrastructure and cloud providers;
2. analytics, monitoring, and support tooling providers;
3. blockchain/RPC/indexing providers where needed for on-chain features;
4. legal/compliance advisors and authorities where required by law.

We do not sell personal data as a data broker.

7. International Transfers

Because the Platform is global, data may be processed in multiple jurisdictions.

Where required, we apply appropriate safeguards for cross-border transfers.

8. Data Retention

We retain data only for as long as needed for:

1. service delivery and security;
2. accounting and operational integrity;
3. legal and compliance obligations;
4. dispute defense and auditability.

Retention periods may vary by data category. Where possible, data is deleted or anonymized when no longer required.

9. Security Measures

We implement technical and organizational controls, including:

1. encryption in transit (TLS);
2. access controls and least-privilege principles;
3. logging and monitoring for security events;
4. backup and incident response procedures.

No system is fully risk-free, and users remain responsible for wallet/device security.

10. Your Rights

Subject to applicable law, you may have rights to:

1. access your personal data;
2. rectify inaccurate data;
3. erase data ("right to be forgotten");
4. restrict or object to processing;
5. data portability;
6. withdraw consent where processing is consent-based.

To exercise rights, contact the official support/legal channel published in the Platform.

11. Children

The Platform is not intended for children under the age permitted by applicable law.

If we learn that prohibited child data was collected, we will take reasonable steps to delete it.

12. Changes to This Policy

We may update this Policy from time to time.

Updated versions become effective when published unless otherwise stated.

13. Contact

For privacy requests, use the official support/legal contact channels published in the Platform.