Privacy Policy

1Introduction

This Privacy Policy describes how aecho.xyz ("we", "us", or "our") collects, uses, shares, and protects personal data when you use the aecho.xyz website, applications, and services (the "Service").

By using the Service you agree to the practices described here. We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and other applicable data-protection laws. If you do not agree, please do not use the Service. This policy should be read together with our Terms of Service and Cookie Policy.

2Who to contact about your data

aecho.xyz is responsible for the personal data it processes about you. For any question about this policy or your data, or to exercise your rights, contact us at:

3Data we collect

We collect the following categories of personal data:

Account and identity

• Email address (for email-based accounts) and account identifiers.
• The public wallet address you connect to sign in (a public blockchain identifier).
• Account settings, preferences, language, and notification choices.

Billing and transactions

• Subscription plan, credit balance, purchase history, and payment status.
• Limited payment metadata from our processors (e.g. a transaction reference and outcome). We do not store your full card number — card data is handled by Stripe.

Usage and technical data

• Watchlists, alerts, analyses you request, and reports you generate.
• Log and device data such as IP address, browser type, timestamps, and pages viewed.
• Cookies and similar technologies, as described in our Cookie Policy.

On-chain data

When you connect a wallet or view on-chain dashboards, we process public blockchain data (addresses, balances, and transactions) that is inherently public.

4About wallet connection

A public wallet address may be considered personal data because it can, in some cases, be linked to an individual. We treat connected addresses as personal data and protect them accordingly. Note that on-chain activity is publicly visible on the blockchain independently of aecho.xyz.

5How we use your data

We use personal data to:

• Provide, operate, secure, and maintain the Service and your account.
• Generate and deliver the analyses, signals, watchlists, alerts, and reports you request.
• Process payments, manage subscriptions and credit balances, and prevent fraud.
• Communicate with you about your account, transactions, security, and service updates.
• Understand usage, debug, improve, and develop new features and models.
• Comply with legal obligations and enforce our Terms.

6Legal bases for processing

Where the GDPR or similar laws apply, we rely on the following legal bases:

7How we share data

We share personal data only as needed to run the Service, and only with:

• Service providers and processors who act on our behalf (payments, hosting, email, AI models), under contract.
• Analytics and infrastructure providers, limited to what is necessary to operate and secure the Service.
• Professional advisers (legal, accounting) where necessary.
• Authorities or third parties where required by law, legal process, or to protect our rights, users, or the public.
• A successor entity in the event of a merger, acquisition, or reorganization, subject to this policy.

8Our main processors

We use a small number of trusted third-party processors. Each handles only the data needed for its function and under its own privacy terms:

9International data transfers

We and our processors may process data in Hong Kong and in other countries or regions. For clarity, "other countries or regions" in this section does not include mainland China. Where personal data is transferred outside your jurisdiction, we rely on appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to protect it in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and other applicable law.

10How long we keep data

We keep personal data only as long as needed for the purposes described, then delete or anonymize it. In general:

• Account and profile data is kept while your account is active and for a reasonable period after closure.
• Billing and transaction records are kept as long as required by tax and accounting law.
• Usage and log data is kept for a limited period for security, debugging, and analytics.

11Security

We use technical and organizational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data against unauthorized access, loss, or misuse.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your own credentials, private keys, and devices.

12Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten"), subject to legal retention obligations.
• Restrict or object to certain processing, including direct marketing.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time, and lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at privacy@aecho.xyz. We may need to verify your identity before acting on a request.

13California privacy rights

If you are a California resident, the CCPA/CPRA gives you rights to know what personal information we collect, to access and delete it, to correct it, and to opt out of any "sale" or "sharing" of personal information. As stated above, we do not sell your personal information or share it for cross-context behavioral advertising.

You may exercise these rights, without discrimination, by contacting us at privacy@aecho.xyz. You may use an authorized agent to submit a request on your behalf.

14Children

The Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

15Cookies

We use cookies and similar technologies to operate and improve the Service. For details on what we use and how to manage them, see our Cookie Policy.

16Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

17Contact us

For any privacy question or to exercise your rights, contact: