Privacy Policy

Last updated: 2026-09-27

1. What we collect

When you create an account we store your email address, encrypted password, display name, wallet addresses you connect, quiz responses, and records of features you use (lesson progress, AI chat history, fee-tracker scans). We also store standard server logs (timestamps, IP, user agent) for security and abuse prevention.

When you use Community, we process your community profile, messages, photos you share, reports, and notification preferences. Other participants can see the profile and content you share in their conversations. The mobile app also uses device notification tokens to deliver notifications when you allow them.

2. What we do with on-chain data

OverseasDeFi is not a custodian. We read public on-chain data from wallets you connect or search, and we cache derived metrics (position values, APR, fees) to make the dashboard fast. We never hold, move, or have signing authority over your funds.

3. Analytics & cookies

On the website, with your consent, we use PostHog for product analytics (what features you use, where you click). You can reject website analytics via the cookie banner or by clearing site data. Rejecting analytics does not limit the product features available to you.

In the mobile app, usage and crash reporting is enabled by default. You can turn it off under You → Privacy & security → Share usage & crash reports. PostHog receives your account identifier and selected usage, device, performance, and diagnostic information to help us improve the app and troubleshoot errors. Mobile session replay and automatic touch capture are disabled. Turning off optional analytics does not turn off features or the operational processing needed to provide the service.

4. Who we share data with

Subprocessors we use today: Supabase (database + auth), Vercel (hosting), Stripe (payments), PostHog (analytics and diagnostics), Resend (transactional email), Stream (community chat), Apple Push Notification service and Google Firebase Cloud Messaging (mobile notifications), Mux (lesson video delivery), AssemblyAI (lesson transcription), Anthropic (AI chat responses), Voyage AI (search embeddings), Cohere (search reranking), Alchemy, DeBank, Zapper, and The Graph (public on-chain data).

Stripe holds your name, email, billing address, and card details for the life of your subscription — we never see or store your card number. Every question you type into the AI chat is sent to Anthropic, Voyage AI, and Cohere, so treat that box the way you would any third-party chat window. We do not sell personal data.

Stream processes community account identifiers, profiles, messages, photos, and device notification tokens to provide chat and notifications. With notification permission, chat notifications are delivered through Apple's Push Notification service on iOS and Google's Firebase Cloud Messaging on Android. You can manage notification permission in your device settings.

5. Your rights

You may request an export or deletion of your account at any time. Signed-in users can use Delete Account in their account settings to start removal of their profile, progress, AI chat history, wallet associations, and uploaded images (chat attachments, discussion images, bug-report screenshots). Community cleanup is processed separately in the background and may finish after the account is closed. Contact us if you need help with deletion.

Signed agreement audit records are retained with the account reference removed. Public on-chain data and shared on-chain caches are not deleted when you close your account. On-chain data is public and is not under our control.

6. Contact

Questions? Email roman.rida@overseasdefi.com.

This page summarizes our current practices. For the full account agreement, see the signed OverseasDeFi Agreement.