Privacy Policy

1. Overview

SolFoundry ("we", "us", "our") operates a token launch platform on the Solana blockchain. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. By using SolFoundry, you consent to the practices described in this policy.

SolFoundry is a primarily client-side application. Most interactions happen directly between your browser and the Solana blockchain. We do not require account creation, email, passwords, or personal identification to use the Platform.

2. Information We Collect

We collect the minimum information necessary to operate the Platform:

• Wallet Address — Your public Solana wallet address is used to sign transactions and displayed in the launch flow. It is not stored on our servers beyond the active session, except when you open a support ticket or when it appears in anonymized analytics events.
• Token Metadata — Name, symbol, description, and logo are uploaded to permanent decentralized storage (Irys/Arweave) at your explicit request. Once uploaded, this data is immutable and publicly accessible on-chain.
• AI Ideation Data — If you use the AI Pass, your selected preset and any prompt text are sent to a third-party AI provider (Google Gemini) for processing. We do not store the raw prompt text after the response is generated. We log the preset used, token counts, and success/failure status for cost analytics.
• AI-Generated Artwork — Generated images are temporarily stored on DigitalOcean Spaces for up to 24 hours. If you proceed to launch, the selected artwork is uploaded to permanent storage (Irys). Temporary artwork is automatically deleted.
• Asset Uploads — Logo images uploaded by you are processed server-side (compression, format conversion) before permanent upload. Temporary copies are deleted after finalization.
• Launch Records — When a token is launched, we log the mint address, network, launch mode, and fee amount to Google Cloud Firestore for platform analytics. No personal information is included.

3. Analytics and Monitoring

We use the following third-party services for product analytics and error monitoring:

• PostHog — Product analytics (page views, feature usage, session recordings). PostHog processes data in the United States. We use a first-party proxy (/ingest) to route analytics data. No personally identifiable information (PII) is sent beyond your wallet address (a public blockchain identifier).
• Sentry — Error monitoring and performance tracking. Sentry receives error reports including stack traces and request metadata. No wallet private keys or financial data are included in error reports.
• Upstash Redis — Distributed rate limiting. Stores anonymized request counters keyed by IP address and wallet address. Data expires automatically within 24 hours.

4. Support Bot (Telegram)

When you open a support ticket via @SolFoundrySupport_bot (https://t.me/SolFoundrySupport_bot), the following data is collected and stored in Google Cloud Firestore:

• Telegram user ID and display name
• Wallet address you provide voluntarily
• Problem description you write
• AI-generated triage summary (category, urgency, recommended action)
• Ticket status and admin responses

5. How We Use Your Information

• To operate the Platform and process your token launches
• To generate AI-powered token concepts at your request
• To provide customer support via the Telegram bot
• To monitor platform health and fix errors (Sentry)
• To understand product usage and improve the Platform (PostHog)
• To prevent abuse and enforce rate limits (Upstash)
• To comply with legal obligations if required

6. Information We Do NOT Collect

• Private keys or seed phrases — never, under any circumstance
• Email addresses, phone numbers, or real names
• Browser fingerprints or third-party tracking cookies
• IP addresses for profiling (IP is used only for rate limiting and expires within 24 hours)
• Transaction history beyond what you explicitly include in a support ticket
• Contents of your wallet beyond the balance check needed for the launch flow

7. Data Sharing and Third-Party Services

We share information only with the following service providers, strictly for platform operation:

• Solana RPC Providers (Helius) — Blockchain interaction. Receives your transaction data as part of normal Solana network operation.
• Irys / Arweave — Permanent decentralized storage for token metadata and artwork. Data uploaded here is immutable and publicly accessible.
• DigitalOcean Spaces — Temporary storage for AI-generated artwork previews (auto-deleted within 24 hours).
• Google Cloud Firestore — Support ticket storage, AI pass session tracking, and launch analytics.
• Google Gemini — AI model for token ideation and support ticket triage. Prompts are processed but not stored by Google for model training (per Google Cloud API terms).
• PostHog — Product analytics (US-hosted).
• Sentry — Error monitoring.
• Telegram Bot API — Support ticket communication.

8. Data Retention

• Session data (localStorage, sessionStorage) — Stored locally in your browser. Cleared when you clear browser data.
• AI artwork previews — Automatically deleted from DigitalOcean Spaces within 24 hours.
• AI pass sessions — Automatically deleted from Firestore after 3 days.
• Support tickets — Retained for 90 days after resolution, then deleted.
• Analytics events (PostHog) — Retained per PostHog data retention settings.
• Error reports (Sentry) — Retained for 90 days.
• Rate limit counters (Upstash) — Expire within 24 hours.
• On-chain data — Permanent and immutable. Cannot be deleted by SolFoundry or anyone.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right to Access — Request a copy of the personal data we hold about you.
• Right to Deletion — Request deletion of your support ticket data by contacting us via Telegram at https://t.me/solfoundryio.
• Right to Correction — Request correction of inaccurate personal data.
• Right to Object — Object to processing of your data for analytics purposes.
• On-chain Limitation — Token metadata, transaction history, and blockchain records are immutable by design. SolFoundry cannot modify or delete on-chain data.
• Minimal Data Use — You can use SolFoundry without the AI Pass or support bot. In a purely on-chain launch flow, no personal data is collected or stored by SolFoundry.

10. International Data Transfers

SolFoundry operates globally. Your data may be processed in the United States (PostHog, Sentry), the European Union (DigitalOcean), and other jurisdictions where our service providers operate. By using the Platform, you consent to the transfer of your information to these jurisdictions.

11. Security

We implement reasonable security measures to protect your information, including encrypted connections (HTTPS/TLS), server-side rate limiting, Content Security Policy headers, and access controls. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

Your wallet security is your responsibility. SolFoundry never asks for or stores your private keys or seed phrases.

12. Children

SolFoundry is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy as the Platform evolves. Material changes will be noted on this page with the updated effective date. Your continued use of the Platform after changes constitutes acceptance of the updated policy. Last updated: April 2026.

14. Contact

For privacy-related questions or data requests, contact SolFoundry via Telegram at https://t.me/solfoundryio or through the support bot at https://t.me/SolFoundrySupport_bot.

Legal Notice

This document is for informational purposes only. Material terms should be reviewed by qualified legal counsel before deployment.