FloorFeed Privacy Policy

1. What we collect

When you create an account and use FloorFeed:

• Sign-in details: the email address or the Google, X or Discord account you sign in with, handled by our sign-in provider Privy, and an account ID.
• Wallet addresses: the addresses of your embedded wallet and any wallets you connect. Wallet addresses and their transactions are public on their blockchains.
• Profile: the display name and avatar you choose, and settings such as your alerts, notification choices and display preferences.
• Activity in the app: who you follow, watchlists, alerts, Floor Calls, practice trades, offers and listings you make through FloorFeed, mints, airdrop sign-ups, referrals, and transactions you sign through FloorFeed.
• Messages: what you send to Support, and the email address you give us to reply to.
• Notifications: if you turn on push notifications, the browser's push subscription for your device.
• AI connector: if you connect an AI app (such as Claude) to your FloorFeed account, the connection and its access tokens, which tools it calls, and any trade requests it prepares for you (what, the limits, when, and whether you signed or rejected it). What the app may read is your choice (market data only, or your wallets, NFTs, offers, alerts, Floor Calls and activity too, with or without amounts); what it reads is then also handled under that app's own privacy policy.
• Your agreement: when you agree to the Terms of Use and this Privacy Policy, which versions, when, and the IP address and browser you agreed from.
• Launchpad and sponsored spots: collection details and art you upload, and the wallet that pays or deploys.

Automatically, when you visit:

• Usage analytics: FloorFeed's own analytics records page views and a short list of product events. It sets no cookies and doesn't identify you: a visitor is counted with a hash of the IP address and browser that changes every day, and these records are kept for 90 days. Add ?notrack=1 to any FloorFeed link to opt this browser out.
• Google Analytics, through Google Tag Manager, which uses cookies to measure visits in aggregate.
• Security data: IP address, browser and device details, used for rate limits, abuse and bot prevention (including Cloudflare Turnstile checks), and error reports when something breaks in the app.

From public sources: blockchain data (sales, transfers, holdings) and marketplace data about the wallets and collections FloorFeed tracks. Trader rankings and wallet pages are built from this public data.

2. How we use it

• To run the Service: sign you in, show your portfolio and history, build the transactions you ask for, send your alerts and replies to Support.
• To keep it fair and safe: stop bots, farms and duplicate accounts (for example, checking that a members-phase pass or airdrop entry isn't claimed twice by the same person), prevent fraud, and enforce our Terms.
• To apply perks and fees, such as Floor Feeders holder discounts, by checking what your wallets hold.
• To understand what works and improve FloorFeed, using aggregate analytics.
• To tell you about FloorFeed: in-app news and, if you agree, notifications. We don't send marketing email without your permission.
• To meet legal obligations and respond to lawful requests.

3. Who we share it with

We share personal information only as needed to run FloorFeed, with service providers who handle it for us under their own privacy terms:

• Privy (sign-in and embedded wallets).
• Cloudflare (hosting, security, bot checks, email routing and encrypted backups) and our hosting providers.
• Google (analytics, and email we send from our support address).
• Marketplaces and on-chain services that fill your transactions, such as OpenSea, Magic Eden, Tensor and Relay, which see your wallet address and the transaction.
• Blockchain data providers such as Helius and Alchemy, which receive wallet addresses we look up.
• Coinbase, if you buy crypto with Coinbase Onramp: you give your payment and identity details to Coinbase, not to FloorFeed.
• Anthropic, whose AI models write FloorFeed's AI takes and research from public market data. Your account details aren't sent to it.

Some things are public by design: your display name, avatar, Floor Calls, practice record and, when you share them, trade cards. Anything you do on a blockchain is public there, permanently.

We may also disclose information if the law requires it, to protect FloorFeed, our members or others from fraud or harm, or as part of a merger, sale or reorganisation of FloorFeed (the new owner would be bound by this policy). We don't sell or rent personal information, and we don't share it for cross-context behavioural advertising beyond Google Analytics.

4. How long we keep it

Account data is kept while your account is open. When you delete your account, we delete your FloorFeed data and your Privy account, except what we must keep for security, fraud prevention (such as records that an identity already claimed a members-phase pass), legal or accounting reasons. Analytics records are kept for 90 days. Backups roll over within weeks. Data on blockchains can't be deleted by anyone.

5. Your choices and rights

You can update your profile and notification settings in the app, export your embedded wallet from Settings, and ask us to access, correct, export or delete your personal information by emailing [email protected]. We'll verify the request comes from the account owner and reply within 30 days.

Depending on where you live (for example California, other US states, the UK or the EU), you may have further rights, such as to object to or restrict processing, or to complain to your data protection authority. We won't treat you differently for using them. Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running a safe service, your consent (which you can withdraw), and legal obligations.

You can block or delete cookies in your browser; FloorFeed's own features don't need them.

6. Security

We protect your information with encryption in transit, access controls and monitoring, and we never hold your private keys. No system is perfectly secure, so please keep your login and wallets safe. If you find a security issue, email [email protected].

7. Children

FloorFeed is for adults 18 and over. We don't knowingly collect information from children. If you believe a child has an account, tell us and we'll delete it.

8. Where it's processed

FloorFeed is run from the United States, and our providers may process data in the US, the EU and elsewhere. When we transfer personal information across borders, we rely on our providers' safeguards, such as standard contractual clauses.

9. Changes and contact

We'll update this policy when what we collect or how we use it changes. The date at the top shows the latest version, and we'll announce material changes in the app's What's new.

Questions or requests: [email protected].