Privacy Policy

This Privacy Policy explains how Dexfy collects, uses, stores, and shares information when you visit the website, create an account, use the dashboard, configure DeFi trading workflows, contact support, participate in an official Dexfy community, or interact with Dexfy services, including the Dexfy Telegram bot.

Depending on how you use Dexfy, we may collect:

• Account information: email address, authentication identifiers, MFA status, OAuth provider information, profile details, and account settings.
• Wallet and blockchain information: wallet labels, wallet addresses, chain selections, balances, transaction hashes, token addresses, destination addresses, transfer requests, trade history, risk checks, monitoring history, and copy trading source wallet addresses.
• Wallet secrets: private keys or seed phrases you choose to import, or signing material created for a new Dexfy wallet. Privy manages this signing material for automated trading; Dexfy stores wallet addresses and Privy identifiers, not plaintext wallet secrets, in its application database.
• Trading configuration: sniper settings, copy trading rules, gas settings, slippage settings, tax and liquidity thresholds, auto exits, re-entry rules, tracked wallets, and plan usage.
• Support and communication information: support tickets, contact form messages, email communication, notification preferences, and broadcast or product-update interactions.
• Telegram and community information: Telegram user ID, username, display name, language, chat or channel identifiers, messages, commands, reactions, message metadata, moderation signals, and support or safety interactions submitted to an official Dexfy bot or community. Telegram does not provide your phone number to the bot unless you explicitly share it.
• Referral, rewards, acquisition, and billing-related information: referral codes, referral click identifiers, attribution relationships, campaign membership and qualification status, service fee events, cashback and partner reward ledgers, balances, risk holds, adjustments, claims, payout destination addresses, first-party acquisition source, medium, campaign, creator, landing page, advertising click identifiers, plan limits, and usage needed to calculate fees or rewards.
• Analytics and interaction information: consent choice, pages viewed, referrer and campaign parameters, bounded call-to-action and product-funnel events, coarse location, browser/device category, and performance measurements. Dexfy does not place personal information, wallet addresses, token addresses, or authentication secrets in analytics events.
• Device, session, and security information: IP address, browser, operating system, device labels, session metadata, request headers, logs, rate-limit data, acquisition and referral attribution context, error reports, and security events.

Dexfy's official Telegram services currently include the Dexfy Assistant, Dexfy Community, and Dexfy Announcements. If you interact with them:

• Telegram separately processes your account and activity under its own Privacy Policy. Messages posted in a public group, channel, or comment thread may be visible to other participants and may be copied or forwarded by them.
• The Dexfy bot may process your message, recent relevant conversation context, and associated Telegram metadata to answer documentation questions, provide support and safety information, moderate abuse, detect spam or phishing, and route an issue to a human moderator when appropriate.
• Bot responses and moderation may use automated or AI-assisted systems. The minimum content reasonably needed for those functions may be processed by contracted AI, hosting, database, security, or monitoring providers acting as Dexfy service providers. Automated responses can be incomplete or incorrect and are not personalized financial advice.
• Authorized Dexfy personnel may review interactions when reasonably needed to provide support, investigate abuse or security incidents, improve response quality, or comply with legal obligations. Automated moderation may flag, hide, delete, or restrict suspected spam, phishing, impersonation, or other prohibited content.
• Do not send private keys, seed phrases, passwords, MFA codes, authentication tokens, wallet-secret screenshots, or other sensitive information through Telegram. Dexfy admins and bots never need these secrets to provide community support.

We use information to:

• Provide authentication, account access, dashboard features, wallet management, trading workflows, transfers, monitoring, notifications, referrals, and support.
• Operate the Dexfy Telegram bot and communities, answer questions, provide documentation guidance, moderate content, enforce community rules, prevent spam and impersonation, and escalate support or safety issues.
• Run quote, preflight, risk-check, wallet, transfer, monitoring, and trade-command operations through Dexfy systems and engine APIs.
• Enforce plan limits, rate limits, security controls, fraud prevention, abuse prevention, and legal compliance.
• Send transactional emails, security messages, product updates, support responses, and service notices.
• Debug issues, monitor reliability, improve performance, understand product usage from first-party operational data, and develop new features.
• Use anonymous Vercel metrics and, where you consent, GA4 and first-party attribution to understand which pages, campaigns, and onboarding steps lead to account creation and meaningful product outcomes such as wallet setup and configured trading workflows.
• Protect Dexfy, users, and third parties from fraud, abuse, unauthorized access, and security incidents.

Dexfy uses Privy wallet infrastructure to create or import wallets and to authorize policy-controlled signing for automated workflows. Supabase remains Dexfy’s account authentication and MFA system. Dexfy may transiently process wallet material during import or user-authorized export, but plaintext wallet secrets are not stored in the Dexfy application database or Fly runtime configuration. Never send private keys, seed phrases, passwords, MFA codes, or recovery phrases through email, support tickets, chat, social media, or public channels.

We do not sell personal information. We may share information with:

• Service providers that help operate Dexfy, such as Supabase for authentication/database services, Privy for wallet custody and signing infrastructure, Sentry for error monitoring, Resend for email, Vercel for hosting and anonymous aggregate web/performance analytics, Google for consented GA4 analytics, and contracted AI, security, monitoring, and infrastructure providers.
• Telegram receives the information needed to deliver bot and community interactions and processes it separately under its own terms and privacy policy.
• Blockchain networks, DEXs, RPC providers, wallet infrastructure, and other on-chain services as needed to request quotes, submit transactions, run checks, or display blockchain data.
• Professional advisers, auditors, insurers, or legal/compliance providers when reasonably necessary.
• Authorities, regulators, courts, or other parties when required by law, to protect rights and safety, or to investigate fraud, abuse, security incidents, or prohibited activity.
• Successors in connection with a merger, financing, acquisition, restructuring, or sale of assets.

Dexfy uses cookies and similar technologies for authentication, session management, security, MFA proof, saved app settings, referrals, consented first-party acquisition attribution, and optional GA4 analytics. Vercel also provides anonymous aggregate web and performance analytics without assigning an individual or cross-site identifier. GA4 remains blocked until you allow analytics, and Google advertising storage, advertising user data, and ad personalization remain denied. Dexfy does not sell personal information or use cross-site advertising cookies. For more detail or to change your analytics choice, use the Privacy choices control and review the Cookie Policy.

Depending on your location, we process information to perform a contract with you, comply with legal obligations, protect legitimate interests, prevent fraud and abuse, protect security, or with your consent. Optional GA4 analytics and acquisition attribution are based on your consent, which you can withdraw at any time through Privacy choices. You may have rights to access, correct, delete, restrict, object to, or export certain personal information. To exercise rights, including requests concerning information held by Dexfy from bot interactions, contact us using the email on this page. Deleting a Telegram message or account does not necessarily delete information already retained by Dexfy for a lawful purpose; contact Dexfy for requests involving Dexfy-held data.

We keep information for as long as needed to provide Dexfy, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, support audits, and preserve records of trading workflows, risk checks, wallet activity, support interactions, and fee or referral activity. Telegram messages, bot context, moderation records, and related logs are retained only as long as reasonably needed to provide the interaction, maintain service and safety, investigate abuse, resolve support issues, or meet legal obligations. Public Telegram content may remain available on Telegram or in copies made by other users after Dexfy no longer needs it. Retention periods vary by data type and legal or operational need.

We use technical and organizational safeguards such as encryption, access controls, authentication controls, logging, monitoring, and secret redaction. No system is perfectly secure. You are responsible for securing your account, devices, MFA factors, passwords, and any wallet secrets you reveal, export, or store outside Dexfy.

Dexfy and its service providers may process information in countries other than your own. Those countries may have different data protection laws. Where required, we use appropriate safeguards for international transfers.

Dexfy is not intended for children. You must be at least 18 years old to use Dexfy, and we do not knowingly collect personal information from children.

We may update this Privacy Policy to reflect changes in Dexfy, legal requirements, service providers, or data practices. Updated versions will be posted on this page with a new last modified date.