Your email address, the public half of your passkey, and the settings you choose in the app. When you trade, the transactions your wallet signs are recorded on public blockchains — that's how blockchains work, and it happens outside of us. We also keep the operational records we need to run the service: your trade quotes and fills (so we can compute refunds and publish the execution report), and standard server logs.
Your private keys and your seed material. They are generated on your device, used on your device, and never sent to us. We can't read them, back them up, or hand them to anyone — which is exactly why we rehearse recovery with you instead.
To run your account, execute what you ask for, send the alerts you turned on (Exit Watch, Send Guard, price alerts), calculate refunds, prevent abuse, and meet legal obligations. That's the list. We don't build advertising profiles and we don't use your trading history to trade against you.
We never sell your data. Ever. We share it only with the processors we need to operate (email delivery, card on-ramp partners, infrastructure), each bound by contract to use it only for us — and with authorities when the law genuinely requires it, in which case we share the minimum and push back on overreach.
Minimal. A session cookie to keep you signed in, and privacy-respecting aggregate analytics (page counts, not people). No third-party ad trackers, no fingerprinting, no "we care about your privacy" banner hiding forty toggles.
We keep account data while your account is open, and financial records for as long as the law makes us. Ask us to delete your account and we delete or anonymise everything else within 30 days. One honest caveat: what's on a public blockchain is permanent by design — nobody can delete that, including us.
Questions, access requests, deletion requests: privacy@aviso.example. If this policy changes, we'll say so in the app and on this page before the change takes effect — no silent edits.