Privacy
What HANDLE keeps, what it never touches, and what you can ask us to delete.
Last updated 21 October 2026. This is a plain-language summary written for a prototype; it is not legal advice.
1. What we store
- X identity: your permanent numeric X user ID, username, display name and profile image URL, with the date they were last verified. The numeric ID is what lets a payment find you after you rename your account.
- Wallet links: the Solana wallet addresses you proved you own, when you proved them, and any security hold applied after a wallet change.
- Payment records: sender wallet, recipient X user ID, amount, fee, optional note, status, and the transaction signatures for deposit, claim and refund.
- Launch listings: title, description, X account, contract address and cover image.
- Sessions: a signed, HttpOnly cookie plus a session row that expires. Nothing that identifies you is kept in browser storage.
- Operator logs: administrative actions, so changes can be audited.
2. What we never store
Your X password, your private keys or seed phrases, and your X access token after your profile has been read. Signature challenges are kept only long enough to be checked and expire on their own within minutes.
3. Who else sees it
X's official API is contacted to confirm a username or read your profile when you sign in. A public Solana RPC service is contacted for chain reads and transaction status. Payment and listing data that is public by design — an escrow transaction on a public ledger, or a live launch card — is visible to anyone. Sender wallets are hidden unless the sender chose to show them.
4. Your controls
Your profile page shows only your own linked wallets, claimed history and notification preferences, and lets you export your records as a CSV file. Signing out revokes the session immediately. To have your identity records deleted, message the account listed on this page from the X account you linked — we match the request to the numeric ID before removing anything.
5. Security
Sessions are signed and expire; claim permissions are single-use and short-lived; payout wallets are held for 48 hours after a change. No system is perfect — if you believe your X account or a linked wallet is compromised, disconnect it from the profile page and tell us.
6. No sale
We don't sell personal data or use it for advertising. Data is kept only while the service runs and for the records that must be kept to reconcile payments.
Questions? Read the docs or message @PayAHandle on X.