Privacy Policy

1. Introduction

Welcome to PokéWallet ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pokewallet.io and use our API services.

The data controller is PokéWallet, reachable at hello@pokewallet.io.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Waitlist Information: Name, email address, role, company name, and use case
• Account Information: Email address, username, password (encrypted)
• Profile Information: Optional profile details you choose to provide
• API Keys: Generated API keys for accessing our services
• Communication Data: Messages, support requests, and feedback you send us

2.2 Information Automatically Collected

• Usage Data: API requests, endpoints accessed, response times
• Device Information: IP address (anonymized), browser type, operating system
• Analytics: Page views, time on site, navigation patterns, user interactions
• Performance Data: Load times, errors, technical diagnostics

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: Deliver and maintain our API services
• Account Management: Create and manage your account
• Waitlist Management: Process and manage your waitlist registration
• Customer Support: Respond to your requests and provide assistance
• Improvements: Analyze usage to improve our services and user experience
• Security: Detect and prevent fraud, abuse, and security incidents
• Communications: Send service updates, security alerts, and promotional messages (with consent)
• Compliance: Comply with legal obligations and enforce our terms

4. Analytics & Tracking

4.1 Google Analytics 4

If you accept analytics cookies, we use Google Analytics 4 to understand how visitors use our website. This service collects:

• Page views and navigation paths
• Time spent on pages
• Geographic location (country/city level)
• Device type and browser information
• Traffic sources (how you found us)
• User interactions (clicks, scrolls, form submissions)

Data Processing: Google Analytics uses cookies and similar technologies. Your IP address is anonymized before being stored. Data is processed in accordance with Google's Privacy Policy.

4.2 Why We Collect This Data

• Understand which features are most valuable to users
• Identify and fix technical issues
• Optimize website performance and load times
• Improve navigation and user experience
• Measure effectiveness of our content and marketing

4.3 How to Give or Withdraw Consent

Google Analytics runs only with your consent, and you can change your choice at any time:

• Click Reject (or close the banner) on your first visit: Google Analytics is not loaded
• Open Cookie settings in the footer of any page to turn analytics on or off. Turning it off stops Google Analytics and deletes its cookies
• You can also install the Google Analytics Opt-out Browser Add-on or block analytics scripts in your browser

4.4 Vercel Web Analytics

We use Vercel Web Analytics to count visits for all visitors. It does not use cookies or store anything on your device, and it does not identify you or track you across sites: visits are counted in aggregate (pages viewed, referrer, country, browser and device type). See Vercel's Web Analytics privacy notes.

5. Cookie Policy

We use cookies and similar tracking technologies to track activity on our service and store certain information.

5.1 Types of Cookies We Use

Browser Settings: You can control cookies through your browser settings. Note that blocking certain cookies may impact website functionality.

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following situations:

• Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

6.1 Third-Party Services

We use the following third-party services that may collect information:

• Google Analytics: For website analytics and user behavior tracking (only with your consent)
• Supabase: For database and authentication services
• Vercel: For hosting, performance monitoring and cookie-free visit statistics (Web Analytics)
• Cloudflare: For CDN and security
• Stripe: For payment processing (when available)

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security audits and updates
• Access controls and authentication
• Secure API key management
• IP address anonymization for analytics

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Account Data: Retained while your account is active
• Waitlist Data: Retained until service launch or you request deletion
• API Usage Logs: Retained for 90 days
• Analytics Data: Retained for up to 26 months (Google Analytics default)
• Support Communications: Retained for 2 years
• Deleted Account Data: Permanently deleted within 30 days

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, please contact us at hello@pokewallet.io

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR and other applicable laws.

Google Analytics processes data in accordance with the EU-U.S. Data Privacy Framework and employs appropriate safeguards for international data transfers.

11. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.