Privacy Policy

1. Who is responsible

the operator of Sayfi is responsible for personal data processed through Sayfi. Contact: see the app.

2. What we collect

• Your wallet address, when you connect, and a signed sign-in message proving you control it. Wallet addresses and transactions are public on Solana.
• A session cookie that keeps you signed in, cookies for your settings such as Practice mode, and a random browser code so request limits and the free trial count your browser on its own instead of everyone sharing your internet address. We use no advertising or cross-site tracking cookies.
• What you do in Sayfi, recorded as events: actions such as quotes, swaps and sign-ins, their outcomes and timings, the tokens and amounts involved, and your wallet address. These never include what you typed in chat.
• The days on which a wallet used Sayfi and which kinds of action it took, to understand whether people come back.
• For each transaction you approve through Sayfi: the transaction, what was quoted and what you received, read from the chain, so we can show your Activity and receipts.
• For each pay link you make: the token, amount, note and your wallet address, kept so anyone with the link can pay it and you can see when it's paid. Recipients you've sent to before are remembered so Sayfi can tell you when an address is new.
• When you open a page: which page, the site that sent you there, and an anonymous daily count of visitors made from a code that changes every day and can't identify you or be linked across days. No cookie is used for this, and browsers that send Do Not Track aren't counted.
• Your IP address, briefly, to limit abuse (for example request limits), and a coarse kind of device or wallet app you signed in from. We don't keep IP addresses in our analytics.

3. Your chats

Your conversation is sent to Sayfi's AI model, which runs on servers we operate, only to answer you. Conversations are stored in your browser, not on our servers, and we don't use them to train models. Clearing your browser data removes them.

4. What we don't collect

We never collect your private keys or recovery phrase; Sayfi will never ask for them. We don't need your name, email or phone number to use Sayfi.

5. Why we use it

• To run Sayfi: sign-in, quotes, checks, transactions, your Activity and receipts.
• To keep it safe: preventing abuse, investigating failures, and finding transactions where money may have moved so we can help.
• To improve it: understanding which features are used and where things fail, in aggregate.
• To meet legal obligations, including sanctions compliance.

Where a legal basis is required, we rely on providing the service you asked for, our legitimate interest in running it safely and improving it, and legal obligations.

6. Who we share it with

We don't sell personal data. We share only what's needed with providers who run parts of Sayfi for us, under their own security and privacy commitments:

• Hosting and infrastructure: Microsoft Azure (including our AI model), Cloudflare.
• Blockchain access: Solana network providers that read the chain and send your signed transactions.
• Trading routes: Jupiter, which receives the tokens, amounts and your wallet address to build a swap.

We may disclose data where the law requires it, or to protect users or Sayfi from fraud or harm.

7. How long we keep it

• Detailed events: 14 days.
• Daily activity summaries and our fee records: up to 2 years.
• Transaction records behind your Activity: while Sayfi offers Activity, so your history stays available to you.
• Request-limit counters tied to an IP address: minutes to a day.

8. The blockchain is public

Anything you do on Solana is public and permanent, and can be linked to your wallet by anyone. We can't change or delete blockchain records.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict use of your personal data, to object, and to complain to a data protection authority. To use them, contact us through the app from, or by signing a message with, the wallet concerned. We'll respond within the time the law requires.

10. International transfers

Our providers may process data in countries other than yours, including the United States. Where the law requires, we rely on appropriate safeguards for those transfers.

11. Security

We protect data with encryption in transit, access limited to the people who need it, sign-in protected by passkeys for our staff, and audit logs. No system is perfectly secure; we'll tell affected users of a breach where the law requires.

12. Children

Sayfi isn't for anyone under 18, and we don't knowingly collect data about children.

13. Changes

We'll update the date above when this policy changes, and give notice in the app for significant changes.