Travix — Privacy Policy

1.1. Updates

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. If we make material changes, we will provide notice by updating the "Last Updated" date at the top of this Policy and, if appropriate, by additional means. We encourage you to review this Policy periodically. Your continued use of the Interface after any changes signifies your acceptance of the updated Policy. If you do not agree with the changes, you should stop using the Interface.

2.1. Age requirement

The Interface is not intended for use by anyone under the age of 18 or the age of majority in your jurisdiction, whichever is higher. By accessing or using the Interface, you represent and warrant that you are at least 18 years old or the age of majority in your jurisdiction, whichever is higher. We do not knowingly collect personal information from individuals under 18 or the age of majority in your jurisdiction, whichever is higher. If you are under 18 or the age of majority in your jurisdiction, whichever is higher, you must not use the Interface or submit any personal data to us. If we learn that we have inadvertently collected information from someone under 18 or the age of majority in your jurisdiction, whichever is higher, we will take steps to delete such information.

3.1. Overview

We minimize the personal data we collect and focus on what is necessary for providing the Interface service. The types of information we may collect include:

3.2. Wallet and blockchain data

When you connect your cryptocurrency wallet to the Interface, we collect your public wallet address and related public blockchain data associated with that address (e.g. transaction history and other on-chain activity, as well as information displayed through the Interface in connection with that wallet, such as balances, open positions, margin levels, funding payments, and trading activity). We use your wallet address as an identifier for your use of the Interface. We do not collect any private keys or secret phrases. Transactions you execute via the Interface will be recorded on public blockchains (including the Travix sovereign chain and any other blockchain networks the Protocol interacts with), and such blockchain data is public and not controlled by us.

Where you grant a session key, sub-account permission, or delegated execution key (for example, to authorize an automated strategy or agent-based execution feature), we may collect and log information sufficient to identify the scope of the delegation, its lifetime, and the on-chain transactions it produces, in order to provide, display, and audit the relevant features.

3.3. Usage and device data

We may collect your device's IP address, browser type, operating system, referring/exiting pages, timestamps of visits, and activity logs of how you interact with our Interface (e.g. clicks, pages viewed, scrolling, mouse movements, navigation paths, session duration, error events, and performance or crash diagnostics). We may also use analytics, diagnostics, and session replay or similar technologies to help us understand how the Interface functioned during a particular session, troubleshoot bugs and support issues, investigate security incidents or suspected abuse, and improve the Interface.

We configure these tools with default privacy controls that mask text, images, user input, free-form fields, and other categories of potentially sensitive data before it leaves the browser. Depending on our configuration, however, these tools may capture portions of the Interface state or content visible during a session, including limited interface information where reasonably necessary for the foregoing purposes. Default privacy controls mask most trading, order, position, and portfolio data; selective visibility of specific elements is limited to what is reasonably necessary for debugging, support, or security purposes and is subject to our internal data minimization policies.

Our tools are configured to mask and exclude private keys, seed phrases, and passwords. You should not submit such information through the Interface.

We collect this data through server logs, browser cookies, or similar tracking technologies. This information helps us analyze trends, administer the website, secure the Interface, investigate fraud or abuse, troubleshoot issues, and improve the user experience. We may also infer general location information (e.g. country or region) from your IP address for purposes such as fraud prevention, enforcing any access or geographic restrictions under our Terms of Service (including detecting and preventing attempts to circumvent such restrictions), and interface localization. We may associate certain usage and device data with your wallet address only where reasonably necessary to respond to a support request, investigate a security incident or suspected abuse, or enforce our Terms or access restrictions. Outside of those limited purposes, such data is maintained without direct linkage to wallet addresses to the extent practicable.

3.4. AI feature data

The Interface may offer AI-driven features, including but not limited to natural-language strategy generation, parameterized strategy templates, agentic execution interfaces, and conversational assistance (collectively, "AI Features"). When you use AI Features, we may collect and process:

• The text, prompts, and instructions you submit to the AI Features;
• The model outputs, strategy skeletons, parameters, and explanations generated in response;
• Session and conversation history within the AI Features;
• Feedback you provide on AI outputs (such as thumbs-up/down or correction signals);
• Associated metadata, such as timestamps, the wallet address connected during the session (where applicable), the AI model or version used, and execution outcomes (where you authorize on-chain execution).

We process AI Feature data to deliver the features, debug and improve model performance, evaluate output quality, detect abuse or misuse of the AI Features, and ensure the safety and reliability of strategy generation. Where AI Features rely on third-party model providers (such as large language model APIs), your prompts and related context may be transmitted to and processed by such providers under their respective terms and privacy policies. We use reasonable efforts to select providers that do not use customer prompts to train their underlying models by default; however, you should not submit private keys, seed phrases, passwords, sensitive personal data, or any information you do not wish to be processed by third-party model providers through the AI Features.

3.5. Oracle Terminal and analytics data

Where you use Oracle Terminal, probability-signal dashboards, or similar analytical features, we may collect information about the markets, events, or assets you view, watchlists you configure, alerts you set, and parameters you select. We use this data to deliver and personalize these features (for example, to remember your watchlist), to monitor feature performance and accuracy, and to improve the analytical models. Where reasonably practicable, we aggregate or de-identify this data for analytics purposes.

3.6. Shielded Order and privacy-feature data

Certain Protocol features (such as shielded orders, encrypted order routing, or MEV-protective relays) are designed to limit the on-chain visibility of order content. You should understand the boundary between protocol-level privacy and Interface-level data collection:

• Protocol-level: Shielded order content may be encrypted, blinded, or otherwise concealed at the smart-contract or relay layer in accordance with the relevant Protocol design.
• Interface-level: Even where the Protocol provides on-chain privacy, the Interface (and its operational infrastructure, analytics, diagnostics, and session replay tooling) may collect information about your use of these features — including the fact that you used a shielded-order feature, IP and device information, session diagnostics, error events, and limited UI metadata — for the same operational, security, and improvement purposes described elsewhere in this Policy.

Privacy features are technical features intended to reduce front-running and unsolicited order observation; they are not designed to anonymize you from the Company, regulators, or law enforcement, and they do not exempt our processing of usage and device data from this Policy.

3.7. User communications

If you choose to contact us (for example, via support email or social media) or provide feedback, we will collect any information you voluntarily provide in that communication, such as your name, email address, or other contact details, along with the content of your message. We use this information solely to respond to your inquiries or improve our services.

3.8. Compliance and eligibility verification data

Although the Interface is non-custodial and we do not conduct routine Know-Your-Customer checks, where applicable law, sanctions or export controls, legal process, or enforcement of our Terms requires us to verify a user's eligibility to access the Interface, we may collect additional information reasonably necessary for such verification (which may include identity, residency, or sanctions screening information). Such data is used strictly to meet the relevant legal or compliance objective.

3.9. Cookies and similar technologies

We and our third-party service providers use cookies, web beacons, local storage, analytics tags, session replay technologies, and similar tools to collect some of the usage, device, diagnostic, and interaction data described above. For details, see the "Cookies and tracking technologies" section below.

4.1. Legal bases for processing

We process personal data only where we have a valid legal basis under applicable law, which may include: (i) performance of a contract (to provide the Interface and requested features), (ii) our legitimate interests (such as securing the Interface, preventing fraud, enforcing our Terms, and improving the Interface), (iii) your consent (where required for certain cookies, AI features, or similar technologies), and (iv) compliance with legal obligations and lawful requests.

4.2. Providing and improving the service

We process your blockchain data and usage data to operate the Interface and deliver its features to you. This includes enabling your use of the Interface in connection with trades and transactions executed via the Protocol, displaying real-time market data and information shown through the Interface in connection with your wallet (such as open positions, balances, margin levels, funding accruals, and PnL), and enabling Interface features (including AI Features, Oracle Terminal, and shielded-order workflows). We also analyze collected data to understand user behavior and improve our user interface, functionality, and overall user experience. For example, understanding how users navigate the trade interface helps us refine the design and fix issues, and analyzing overall interaction patterns can guide improvements to the Interface. We do not profile individual users for marketing.

We may also use analytics and session replay data to reproduce bugs, understand how users navigate the Interface and trading workflows, investigate failed or incomplete actions, improve feature design and performance, and support users. We process this data based on our legitimate interests in operating, improving, and securing the Interface, and where required by applicable law, based on your consent. We do not use session replay data for targeted advertising, cross-context behavioral advertising, or the sale of personal data, or share session replay recordings with third parties except as described in this Privacy Policy.

4.3. AI feature operation and improvement

We process AI Feature data to generate responses and strategy outputs, evaluate and improve model quality, fine-tune prompts and orchestration logic, detect prompt-injection attacks or other misuse, monitor for unsafe or hallucinated outputs, and ensure that automated strategy generation remains within safety and risk boundaries. We may use aggregated or de-identified AI Feature data for research, benchmarking, and product development. We do not knowingly use the contents of your individual AI prompts for targeted advertising.

4.4. Account metrics and personalization

We use your data to calculate and provide personalized metrics such as your VIP tier status, fee tier, trading volume, referral rewards, points, and performance statistics. For instance, we track your trading volume and liquidity provision to determine if you meet criteria for VIP benefits (e.g. fee discounts or other perks in a given epoch), and we use your on-chain activity to update your Portfolio page with profit/loss and volume statistics.

4.5. Security and fraud prevention

We may use data (including IP addresses, device information, AI Feature interaction patterns, and unusual activity or access patterns, including on-chain activity associated with use of the Interface) to protect the Interface and its users. This includes detecting and preventing fraudulent activity, market manipulation, oracle or funding-rate manipulation, unauthorized access, prompt-injection or AI-misuse attempts, abuse of shielded-order or privacy features, or attempts to circumvent our Terms of Service (for example, using the Interface from a restricted jurisdiction). For example, usage data might be used to identify multiple accounts abusing a referral or points program, or to mitigate DDoS attacks. Any use of data for security is limited to what is necessary to keep the Interface safe and reliable.

We may also use analytics, diagnostic, and session replay data to investigate suspected fraud, abuse, attempts to circumvent our Terms, or other security incidents.

4.6. Legal compliance

Where necessary, we use and retain your information to comply with applicable laws, regulations, legal processes, or governmental requests. As a decentralized interface, we generally do not conduct routine Know-Your-Customer checks on users. However, if applicable law, legal process, sanctions or export controls, or enforcement of our Terms requires us to verify a user's eligibility to access the Interface or obtain additional information, we will request and process only the information reasonably necessary for those purposes. Such information will be used strictly to meet our legal and compliance obligations, and retained only for as long as required by applicable law. If authorities require us to retain or report certain information relating to use of the Interface, we will comply as legally required.

4.7. Communications

We use your provided contact information (if any) to communicate with you, respond to support inquiries, and send service-related notifications.

4.8. Limitation of use

We will only use your personal data for the purposes described above or as otherwise disclosed at the time of collection. If we need to use your data for an unrelated purpose, we will notify you and, if required, seek your consent.

5.1. Essential cookies

Some cookies are necessary for the Interface to function. For example, we may use cookies to remember your wallet connection status or preferences (like interface language, dark mode settings, or risk-disclosure acknowledgements), so you don't have to re-select them each time. These cookies are strictly necessary for services you request and do not require consent under applicable law.

5.2. Analytics cookies

We may use third-party analytics and session replay tools to collect information about how users interact with the Interface. These technologies may collect information such as pages visited, time on site, session identifiers, referring links, clicks, scrolling, mouse movements, interaction flows, technical error and performance data, and similar usage or diagnostic information. We use this information to analyze performance and usage trends, reproduce and troubleshoot errors, improve the Interface, support users, and protect the Interface against abuse. We do not use these tools for targeted advertising.

Where required by applicable law, we will set analytics or session replay cookies or similar technologies only after you provide consent via our cookie banner or other preference tools made available on the Interface, and you may withdraw your consent at any time by adjusting your cookie preferences or through your browser settings. Upon withdrawal of consent or opt-out where applicable, we will cease collecting session replay data from your browser. You can refer to the privacy policies of the relevant providers for additional information about how they handle data.

5.3. Advertising and marketing cookies

The Interface does not currently display third-party advertisements and we do not currently use cookies for targeted advertising. If that changes in the future, we may engage advertising partners or social media platforms for promotional purposes and seek any necessary consents before using any non-essential cookies for advertising or marketing purposes. We will update this Policy if our practices change.

5.4. Your choices

You have control over cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies or alert you when a cookie is being placed. If you disable or reject cookies, some features of the Interface may not work properly. For more information on how to manage and delete cookies, visit your browser's help documentation.

Where required by applicable law, we will obtain your consent before placing non-essential cookies or similar technologies on your device. You can control cookies through your browser settings and, where available, through our cookie preference tools on the Interface.

6.1. Service providers

We employ trusted third-party companies and individuals to facilitate our services (for example, cloud hosting providers, technology support, analytics services, security providers, large language model and AI infrastructure providers, oracle and market-data providers, and other operational partners). These service providers may process your personal data on our behalf and under our instructions, only for the purposes described in this Policy. We require that they protect your data and use it only for the services they are providing to us.

This may include sharing usage, device, diagnostic, analytics, session replay, and AI Feature data with providers that help us host, secure, monitor, debug, analyze, support, and operate the Interface. Such providers process data on our behalf under contractual obligations, including data processing agreements, that require them to protect your data and use it only for the services they provide to us. Data processed by our service providers may be transferred to and stored in jurisdictions outside your own, as described in Section 11.

6.2. Affiliates and corporate transactions

If the Interface is operated by or in the future acquired by a larger organization, we may share information with our affiliates who are bound by similar privacy commitments. Additionally, if there is a business transaction such as a merger, acquisition, reorganization, or sale of assets involving the Interface, your information may be transferred as part of that deal. We will ensure any successor entity honors the commitments of this Privacy Policy regarding your personal data.

6.3. Legal requirements and protection of rights

We may disclose your information if required to do so by law or in a good-faith belief that such action is necessary to: (i) comply with a legal obligation, regulatory requirement, or governmental request; (ii) enforce our Terms of Service; (iii) detect, investigate, or protect against illegal activities, fraud, market manipulation, or security issues; or (iv) protect the rights, property, and safety of the Interface, our users, or the public. For example, we might preserve and share information in response to a court order or subpoena, or to address a violation of the Terms.

6.4. With your consent

In situations where you have given us explicit consent to share your information with third parties, we will do so according to the terms of that consent.

6.5. General

Except for the cases above, we will not share your personal data with any third parties. If we ever need to share data for any other purpose, we will explain it to you at the time of collection or before sharing and obtain your consent if required.

7.1. Measures

We take the security of your data seriously. We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (e.g. using HTTPS for our website), firewalls and access controls on our servers, regular security audits of our smart contracts and infrastructure, and access logging and monitoring of internal systems. We also limit access to personal data to only those team members and service providers who need it to perform their duties, and they are subject to confidentiality obligations.

No security measure is perfect, and we cannot guarantee absolute security of any information transmitted to or stored by us. You are responsible for the security of your own wallet, private keys, and credentials.

8.1. General

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. In practice, because we minimize stored personal data, our retention practices are as follows:

8.2. Wallet and transaction data

Your wallet address and related on-chain activity may be stored in our systems as records associated with your use of the Interface. This data is kept to support continued display of Interface features over time (for example, cumulative trading history, VIP status, fee tier progression, referral information, points balances, or similar Interface features).

8.3. Usage logs

Our server, security, analytics, diagnostic, and session replay logs (which may include IP addresses, device information, and interaction data) are typically retained for 90 days, and then deleted or anonymized, unless a longer period is reasonably necessary for troubleshooting, product support, security monitoring, investigation of fraud or attacks, dispute resolution, or legal compliance. Replay recordings are generally retained only for 90 days and may be deleted sooner than general logs based on our configured settings.

8.4. AI Feature data

AI Feature prompts, outputs, and conversation history may be retained for a limited period (typically up to 90 days for full session logs) to support model evaluation, debugging, abuse detection, and product improvement, after which they are deleted or aggregated/de-identified for ongoing analytics. Where third-party model providers handle prompts and outputs on our behalf, their retention practices are governed by our agreements with them and their respective privacy policies.

8.5. Cookies

Cookies used on our site may persist on your browser until they expire or are deleted. Session cookies expire when you close the browser. Analytics cookies might persist for a set duration (e.g. typically 6 months to 2 years) unless you clear them. You can delete cookies at any time via your browser settings.

8.6. Communications and compliance data

If you contact us and provide personal information, we will retain that correspondence and your contact details for as long as necessary to address your query and maintain records of our communication. Any eligibility, sanctions screening, or compliance information collected under Section 3.8 will be retained only for as long as required by applicable law or as reasonably necessary to demonstrate compliance.

When we have no ongoing legitimate business need to process your personal data, we will either delete it or anonymize it, unless we are required to retain it by law.

9.1. Access

You have the right to request access to the personal data we hold about you and to receive information about how we use it. This includes asking for a copy of the information we have collected on you. Most of your data with the Interface is accessible to you directly through your connected wallet and in-app views like Portfolio or History. For any additional data, you can contact us.

9.2. Correction

You have the right to request that we correct or update any inaccurate or incomplete personal data. Since we primarily identify you by your wallet address, there is generally no traditional profile data to correct, but if you believe any information we have is incorrect, let us know and we will investigate.

9.3. Deletion

You have the right to request deletion of your personal data that we hold. If you wish for us to delete information like your account metrics, AI Feature conversation history, or any contact info you provided, we will do so, provided we do not have a legal obligation to retain it. Please note that we cannot delete data recorded on public blockchains, including the Travix sovereign chain — such data is, by design, immutable and not under our control.

If we maintain session replay, analytics, AI Feature, or diagnostic records that can reasonably be linked to you, your wallet, or your support request, we will take reasonable steps to delete such records upon a valid request, unless we are required or permitted to retain them for security, fraud prevention, dispute resolution, or legal compliance.

9.4. Objection and restriction

You have the right to object to or ask us to restrict the processing of your data in certain circumstances. For example, you can object to processing that is based on our legitimate interests. You can also opt out of any direct marketing (though we currently do not send marketing communications without consent).

9.5. Data portability

You have the right to have the data we hold about you transferred to another organization and to receive personal data in a structured, commonly used format.

9.6. Withdraw consent

If we are processing any of your personal data based on your consent, you have the right to withdraw that consent at any time.

9.7. How to exercise your rights

To exercise any of your rights, please contact us using the information in the "Contact us" section below. We may ask you to verify your identity (e.g. by having you sign a message with your wallet or provide identifying information) to ensure that we do not disclose data to the wrong person.

In order to locate and process your request, we may ask you to provide sufficient information to identify the relevant records, such as details of the support interaction or issue involved, approximate dates/times of use, your wallet address, or contact details.

We will respond to your request within the timeframe required by applicable law. Please note that these rights are not absolute and may be subject to certain exceptions, for instance, we may decline a request if fulfilling it would violate laws or interfere with others' rights, or if we cannot technically comply (such as with respect to data immutably recorded on a public blockchain).

10.1. Minors

As noted under the Eligibility section, the Interface is not intended for minors under 18 or the age of majority in your jurisdiction, whichever is higher, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that a minor has used the Interface or provided us with personal data, please contact us so we can investigate and delete any such information. We will take prompt steps to remove such data and, where appropriate, restrict further access to the Interface associated with the relevant wallet address or other identifier.

11.1. Global platform

The Interface is a global platform. The information we collect from you might be transferred to, and stored at, servers and partners located in countries outside of your own, including jurisdictions where our AI, hosting, analytics, or oracle service providers operate. This means your data may be processed in jurisdictions that may have data protection laws that are different or less protective than the laws of your country. We will, however, take appropriate measures to ensure that your personal data remains protected in accordance with this Policy and applicable law. These measures may include relying on adequacy decisions for certain countries, or implementing standard contractual clauses and other lawful safeguards for data transfers.

By using the Interface or submitting your information, you acknowledge this transfer, processing, and storage of your information in other countries. Regardless of where your data is processed, we will handle it securely as described in this Policy.

12.1. External services

The Interface may contain links to third-party websites or integrate third-party services that are not operated by us. For example, our trading charts may be powered by a third-party library (e.g. TradingView), our AI Features may rely on third-party large language model providers, price feeds may be sourced from third-party oracle networks, or you may use a third-party wallet (e.g. MetaMask, Phantom, Keplr) to interact with the Interface. If you leave our site or engage with a third-party service, this Policy will not apply to those external services. Each third-party site or service will have its own privacy policy, and we do not accept any responsibility or liability for their policies or how they handle your data. We encourage you to review the privacy policies of any third-party services you access.

13.1. Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: notices@travix.finance

We will do our best to address your inquiry promptly and thoroughly. Your privacy is important to us, and we welcome your feedback.