# BlockSentiment Privacy Policy
**Last updated: July 2025**
## 1. Introduction
BlockSentiment ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Chrome extension.
## 2. Information We Collect
### 2.1 Information You Provide
- **API Keys**: Moralis and OpenAI API keys (stored locally in your browser)
- **Extension Settings**: Whale threshold, polling interval, and other preferences
- **License Keys**: Premium subscription license keys (stored locally)
### 2.2 Information We Collect Automatically
- **Token Addresses**: When you visit blockchain explorer pages
- **Browser Information**: Chrome version and extension version
- **Usage Data**: Which blockchain explorers you visit and when
- **Error Logs**: Technical errors for debugging purposes
### 2.3 Information We Do NOT Collect
- **Personal Identifiable Information**: Names, emails, addresses
- **Financial Data**: Wallet addresses, transaction amounts
- **Browsing History**: Other websites you visit
- **Private Keys**: Never access your crypto wallets
## 3. How We Use Your Information
### 3.1 To Provide Our Service
- **API Calls**: Send token addresses to Moralis and OpenAI APIs
- **Data Processing**: Analyze on-chain data and generate insights
- **Extension Functionality**: Display analytics on blockchain explorer pages
- **Premium Features**: Verify license keys and enable advanced features
### 3.2 To Improve Our Service
- **Error Tracking**: Identify and fix technical issues
- **Performance Monitoring**: Optimize extension performance
- **Feature Development**: Understand usage patterns to improve features
### 3.3 To Communicate With You
- **Support**: Respond to your questions and issues
- **Updates**: Notify you about new features and updates
- **Marketing**: Send promotional content (with your consent)
## 4. Data Storage and Security
### 4.1 Local Storage
- **Chrome Storage**: All data is stored locally in your browser
- **No Server Storage**: We don't store your data on our servers
- **API Keys**: Encrypted and stored securely in Chrome's sync storage
- **Settings**: Stored locally for optimal performance
### 4.2 Data Security
- **Encryption**: All sensitive data is encrypted
- **Secure APIs**: We use HTTPS for all API communications
- **No Third-Party Access**: We don't share your data with third parties
- **Regular Updates**: We regularly update security measures
### 4.3 Data Retention
- **Local Data**: Stored until you uninstall the extension
- **API Logs**: Automatically deleted after 30 days
- **Error Logs**: Retained for 90 days for debugging
- **Usage Analytics**: Anonymized and retained for 1 year
## 5. Third-Party Services
### 5.1 Moralis API
- **Purpose**: Fetch on-chain blockchain data
- **Data Shared**: Token addresses and blockchain information
- **Privacy**: Governed by Moralis Privacy Policy
- **Link**: https://moralis.io/privacy
### 5.2 OpenAI API
- **Purpose**: AI-powered sentiment analysis
- **Data Shared**: Token metrics and market data
- **Privacy**: Governed by OpenAI Privacy Policy
- **Link**: https://openai.com/privacy
### 5.3 Gumroad (Premium)
- **Purpose**: Premium subscription management
- **Data Shared**: Email and payment information
- **Privacy**: Governed by Gumroad Privacy Policy
- **Link**: https://gumroad.com/privacy
## 6. Your Rights and Choices
### 6.1 Access and Control
- **View Data**: Access your stored settings and preferences
- **Delete Data**: Clear all stored data through extension settings
- **Export Data**: Download your settings and preferences
- **Opt-Out**: Disable data collection features
### 6.2 Communication Preferences
- **Email Opt-Out**: Unsubscribe from marketing emails
- **Update Preferences**: Change your communication settings
- **Support Contact**: Reach us at support@blocksentiment.com
### 6.3 Data Deletion
- **Extension Uninstall**: Automatically deletes all local data
- **Manual Deletion**: Clear data through Chrome settings
- **API Key Removal**: Delete stored API keys anytime
## 7. Children's Privacy
- **Age Requirement**: Users must be 18+ or have parental consent
- **No Child Data**: We don't knowingly collect data from children under 13
- **Parental Rights**: Contact us if you believe we have child data
## 8. International Data Transfers
- **Data Location**: All data is stored locally in your browser
- **API Services**: May transfer data internationally for processing
- **Compliance**: We comply with applicable data protection laws
- **GDPR**: We respect EU data protection regulations
## 9. Changes to This Policy
- **Notification**: We'll notify you of significant changes
- **Extension Updates**: Policy updates may require extension updates
- **Continued Use**: Using the extension after changes constitutes acceptance
- **Version History**: Previous versions available upon request
## 10. Contact Information
### 10.1 General Inquiries
- **Email**: privacy@blocksentiment.com
- **Address**: [Your Business Address]
- **Response Time**: Within 48 hours
### 10.2 Data Protection Officer
- **Email**: dpo@blocksentiment.com
- **Purpose**: Handle data protection inquiries
- **Response Time**: Within 72 hours
### 10.3 Legal Requests
- **Email**: legal@blocksentiment.com
- **Purpose**: Handle legal and regulatory requests
- **Response Time**: Within 5 business days
## 11. Legal Basis (GDPR)
### 11.1 Consent
- **Marketing**: Email communications (with consent)
- **Analytics**: Usage data collection (with consent)
- **Withdrawal**: You can withdraw consent anytime
### 11.2 Legitimate Interest
- **Service Provision**: Necessary for extension functionality
- **Improvement**: Service optimization and bug fixes
- **Security**: Fraud prevention and data protection
### 11.3 Contract Performance
- **Premium Features**: License verification and access
- **Support**: Customer service and technical support
- **Updates**: Extension updates and maintenance
## 12. Data Breach Procedures
### 12.1 Breach Detection
- **Monitoring**: Continuous security monitoring
- **Detection**: Automated and manual breach detection
- **Assessment**: Immediate impact assessment
### 12.2 Notification
- **72 Hours**: Notify authorities within 72 hours
- **Users**: Notify affected users promptly
- **Transparency**: Full disclosure of breach details
### 12.3 Remediation
- **Immediate Action**: Contain and mitigate breach
- **Investigation**: Thorough breach investigation
- **Prevention**: Implement additional security measures
## 13. Cookie Policy
### 13.1 Extension Cookies
- **Functionality**: Essential for extension operation
- **Preferences**: Store user settings and preferences
- **Security**: Authentication and session management
### 13.2 Third-Party Cookies
- **Analytics**: Google Analytics (if used)
- **Marketing**: Social media and advertising cookies
- **Control**: Manage through browser settings
## 14. California Privacy Rights (CCPA)
### 14.1 Right to Know
- **Data Categories**: What personal information we collect
- **Sources**: Where we get your information
- **Purpose**: Why we use your information
- **Sharing**: Who we share your information with
### 14.2 Right to Delete
- **Request**: Ask us to delete your personal information
- **Verification**: Verify your identity before deletion
- **Exceptions**: Legal requirements and service functionality
### 14.3 Right to Opt-Out
- **Sales**: Opt-out of data sales (we don't sell data)
- **Sharing**: Opt-out of data sharing for advertising
- **Contact**: privacy@blocksentiment.com
## 15. Additional Information
### 15.1 Open Source
- **Code**: Extension code is open source
- **Transparency**: Full transparency of data handling
- **Community**: Community contributions welcome
### 15.2 Security Measures
- **Encryption**: All data encrypted in transit and at rest
- **Access Control**: Limited access to sensitive data
- **Regular Audits**: Security audits and penetration testing
- **Employee Training**: Regular privacy and security training
### 15.3 Compliance
- **GDPR**: European data protection compliance
- **CCPA**: California privacy law compliance
- **COPPA**: Children's privacy protection
- **Industry Standards**: Following security best practices
---
**Contact us at blocksentiment@gmail.com with any questions about this Privacy Policy.**