Privacy Policy

1. Introduction

OnchainProbe ("we", "us", "our") operates the website onchainprobe.com and the OnchainProbe platform. This Privacy Policy describes how we collect, use, and protect your personal information when you use our service. By using OnchainProbe, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

• Account information. Email address and name, provided via Clerk authentication.
• Usage data. How you interact with the platform, including pages visited and features used.
• Test run data. Timestamps, pass/fail status, duration, error summaries, and RPC response bodies from your test executions. Response data is retained according to your plan's retention period (see Data Retention below) and then permanently deleted.
• Endpoint URLs. The RPC endpoint URLs you configure for testing, stored encrypted at rest.

3. How We Use Information

• Provide, maintain, and improve the OnchainProbe service.
• Send transactional notifications related to your account and test runs. You can opt out of non-essential communications.
• Monitor for security threats and prevent abuse.
• Analyze usage patterns to improve the product using privacy-respecting analytics.

4. Third-Party Services

We use the following third-party services to operate OnchainProbe:

• Clerk. Authentication and user management.
• Stripe. Payment processing for paid tiers.
• Plausible. Privacy-respecting, cookieless website analytics.
• Resend. Transactional email delivery.

Each service processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

5. Data Retention

We retain your data according to the following schedule:

• Account data. Retained while your account is active.
• Test run data (Free tier). Retained for 7 days.
• Test run data (Pro tier). Retained for 30 days.
• Test run data (Enterprise tier). Retained for 90 days.

When you delete your account or data, it is purged from our systems within 30 days.

6. Security

We take the security of your data seriously. All data in transit is protected with TLS encryption. API keys are hashed using Argon2id before storage. We conduct regular security reviews of our infrastructure and application code. While no system is perfectly secure, we work to protect your information using industry-standard practices.

7. Your Rights

You have the right to:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request correction of inaccurate personal data.
• Deletion. Request deletion of your personal data and account.
• Data portability. Request an export of your data in a machine-readable format.

To exercise any of these rights, contact us at [email protected].

8. Cookies

We use minimal cookies strictly for session authentication. We do not use tracking cookies or advertising cookies. Our analytics provider, Plausible, is fully cookieless and does not track individual users across sessions.

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via the email address associated with your account. We encourage you to review this page periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, contact us at [email protected].