Privacy Policy
Last updated May 26, 2026
What we collect
- Identity — your wallet address, username, and the emails, Google/social, and Vercel accounts you connect and verify.
- Attestations — verified bindings between your wallet and your contact methods/accounts, used to recognize that they belong to one identity.
- Activity — a log of meaningful actions: signing in, authorizing apps, changing settings, adding emails, ingesting context, spending credits.
- Context — content you or apps you authorize choose to store with your dots (e.g. prompt/context history).
- Credits — your pute balance and ledger of credits and debits.
Why we collect it
To authenticate you, let you sign in to and authorize third-party apps, resolve your different emails/accounts to one identity, show you your own activity, meter credits, and keep the service secure. We do not sell your personal data.
How it is stored
Identity and aggregate structures are stored in Supabase. Your own data is held in a per-user database (Turso) and kept in sync in real time by a sync engine (Jazz). We use reputable processors — including Privy (wallets/auth), Supabase (database/auth), Turso (per-user storage), Stripe (payments), and Resend (email) — who process data on our behalf.
What we share
When you authorize an app, we share only the scopes you approve on the consent screen. Apps you connect are independent controllers of the data you share with them. We may disclose data to comply with law or protect users and the service.
Your choices
You can review your activity and connected apps, revoke an app's access, and request deletion of your dots and associated data, subject to records we must retain for legal, security, or accounting reasons. On-chain data (e.g. wallet transactions) is public and outside our control.
Contact
Questions about privacy? Reach us at privacy@dots.id.
This is a starting template, not legal advice — have counsel review before launch.