Privacy

x402liquid.ai Privacy Policy

This Privacy Policy describes how Immutifi, Inc., a Wyoming corporation (“Immutifi,” “we,” “us,” or “our”) collects, uses, stores, and discloses information in connection with x402liquid.ai and related software, interfaces, local components, and services (collectively, the “Service”).

x402liquid is designed around a local-first and non-custodial architecture. Certain sensitive information is intended to remain on the user’s own device rather than being transmitted to or stored by Immutifi.

1. Information We May Collect

Depending on how you use the Service, we may collect or process the following categories of information.

Account Information

This may include:

  • username;
  • email address;
  • account identifier;
  • login information;
  • authentication status;
  • account preferences; and
  • jurisdiction notification preferences.

Wallet Information

We may process public blockchain information such as:

  • public wallet addresses;
  • blockchain network;
  • token balances;
  • public transaction information;
  • wallet connection status; and
  • wallet ownership verification signatures.

Public wallet addresses and public blockchain transactions may be permanently visible on the applicable blockchain.

Exchange and Connected Account Information

When supported accounts are connected, the Service may process information such as:

  • exchange name;
  • connection status;
  • account identifiers;
  • available balances;
  • trading balances;
  • open or historical orders;
  • execution results; and
  • other account information necessary to provide requested features.

Where x402liquid uses a Local Trading Connection, exchange API credentials are designed to remain encrypted on the user’s own device rather than being stored by the x402liquid website.

Trading and Agent Information

We may process information relating to:

  • selected trading agents;
  • trading mandates;
  • allowed markets;
  • risk settings;
  • permitted accounts;
  • trade proposals;
  • order previews;
  • executed orders;
  • rejected orders;
  • agent decisions;
  • timestamps;
  • audit records;
  • safety-control outcomes; and
  • other trading-related events.

Some of this information may remain local to the user’s device depending on configuration.

Device and Technical Information

We may automatically receive limited technical information including:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • session information;
  • timestamps;
  • security events;
  • error information; and
  • information necessary to protect the Service against abuse.

Communications

If you contact us, we may retain:

  • your email address;
  • support requests;
  • feedback;
  • correspondence; and
  • information you voluntarily provide.

Jurisdiction Alerts

If you request availability notifications, we may process:

  • your email address; and
  • the countries, states, provinces, or other jurisdictions you ask us to monitor.

2. Information Designed to Remain Local

x402liquid is designed so that certain sensitive information can remain on the owner-controlled device.

Depending on your configuration, this may include:

  • wallet private keys;
  • wallet seed phrases;
  • hardware-wallet secrets;
  • exchange API secrets;
  • exchange private keys;
  • local model credentials;
  • local agent configuration;
  • wallet signatures;
  • trading-session credentials;
  • local portfolio state; and
  • certain execution information.

Immutifi does not ask users to provide wallet seed phrases or private keys.

You should never enter a seed phrase or private key into a website form, AI chat, support message, or agent prompt.

3. Local and Hardware Wallets

The Service may interact with locally installed software wallets and hardware wallets, including compatible Ledger and Trezor configurations.

Hardware-wallet private keys are intended to remain on the hardware device.

x402liquid may request that a connected wallet:

  • identify a public address;
  • sign an authorization;
  • sign a trading mandate; or
  • approve a transaction.

The wallet or hardware device controls whether that request is approved.

4. Local AI Models and Agents

Users may connect locally running AI models, software agents, or other local tools.

When a local model is used, x402liquid is designed to allow local processing where practical.

Information processed solely by a local model may never be transmitted to Immutifi.

However, if you choose to use a remote model, third-party AI service, paid agent, market-data provider, or other external service, information necessary for that request may be transmitted to that provider.

Third-party providers have their own privacy practices.

5. How We Use Information

We may use information to:

  • provide and operate the Service;
  • authenticate users;
  • connect supported wallets and accounts;
  • display balances;
  • operate trading tools;
  • enforce trading mandates;
  • provide agent functionality;
  • evaluate execution routes;
  • maintain safety controls;
  • detect fraud and abuse;
  • perform sanctions and compliance screening;
  • investigate security events;
  • maintain audit records;
  • provide support;
  • send requested jurisdiction notifications;
  • maintain and improve the Service;
  • comply with legal requirements; and
  • enforce our Terms and Conditions.

6. Automated Processing

Certain functions may involve automated decision-making.

For example, software may automatically:

  • reject an order that exceeds an owner-defined limit;
  • reject unsupported assets;
  • block a restricted jurisdiction;
  • compare execution venues;
  • pause activity following a safety condition;
  • prevent an agent from using an unauthorized account; or
  • prevent a trade when required market or compliance information is unavailable.

These automated controls are primarily intended to enforce user instructions, security requirements, or platform policies.

7. Blockchain Information

Blockchain networks are public systems.

If you use a public blockchain, information such as:

  • wallet address;
  • transaction amount;
  • token;
  • destination;
  • transaction hash; and
  • timestamp

may become publicly and permanently available.

Immutifi cannot delete or modify information recorded on a decentralized blockchain.

8. Information We Share

We may disclose information to third parties when reasonably necessary to provide the Service.

These parties may include:

  • exchanges;
  • blockchain networks;
  • wallet providers;
  • RPC providers;
  • market-data providers;
  • payment facilitators;
  • AI providers;
  • cloud and infrastructure providers;
  • security providers;
  • compliance and sanctions-screening providers;
  • professional advisers; and
  • government authorities where legally required.

We seek to limit information disclosed to what is reasonably necessary for the relevant purpose.

9. Trading Venues and Exchange Accounts

If you connect an exchange or other trading venue, information may flow between your Local Trading Connection and that provider.

The provider may receive:

  • account authentication information;
  • order information;
  • trading instructions;
  • device or API information; and
  • other data required by its service.

Those activities are governed by the provider’s own terms and privacy policy.

10. Affiliate and Partner Relationships

Immutifi may participate in affiliate, broker, builder, referral, integrator, or revenue-sharing arrangements with certain exchanges or service providers.

A partner may receive information needed to attribute activity to Immutifi, such as:

  • referral identifiers;
  • broker identifiers;
  • builder identifiers;
  • affiliate codes; or
  • other transaction attribution information.

These identifiers do not require disclosure of wallet private keys or seed phrases.

We do not sell wallet private keys, seed phrases, or exchange API secrets.

11. Sale of Personal Information

Immutifi does not sell wallet private keys, wallet seed phrases, exchange API secrets, or local signing credentials.

We do not sell personal information for monetary consideration in the ordinary meaning of the term.

If our practices change in a way that creates additional legal obligations under applicable privacy law, we will update this Privacy Policy and provide any legally required choices.

12. Cookies and Local Storage

The Service may use cookies, browser storage, or similar technologies to:

  • maintain sessions;
  • remember settings;
  • remember collapsed or expanded panels;
  • maintain account preferences;
  • preserve local trading configuration;
  • protect against abuse; and
  • improve usability.

Some functionality may depend on browser local storage.

Clearing local storage or browser data may remove locally stored settings or session information.

13. Data Retention

We retain information only for as long as reasonably necessary for:

  • providing the Service;
  • security;
  • dispute resolution;
  • legal compliance;
  • fraud prevention;
  • audit requirements; and
  • enforcement of our agreements.

Retention periods may differ depending on the type of information.

Data stored only on your device remains subject to your own device-management and deletion practices.

Public blockchain information may remain permanently available regardless of our retention practices.

14. Security

We use administrative, technical, and organizational measures intended to protect information.

These measures may include:

  • encryption;
  • access controls;
  • local credential storage;
  • session expiration;
  • bounded permissions;
  • origin controls;
  • sanctions screening;
  • transaction validation;
  • rate limiting;
  • credential redaction; and
  • activity logging.

No software, network, wallet, exchange, or data-storage system can be guaranteed completely secure.

You are responsible for protecting your own devices, wallets, hardware wallets, exchange accounts, passwords, API credentials, and recovery information.

15. Children

The Service is not intended for persons under 18 years of age.

We do not knowingly collect personal information from children for the purpose of enabling digital-asset trading.

If you believe a child has provided personal information to us, contact us.

16. Privacy Rights

Depending on where you live, you may have rights concerning your personal information, including rights to:

  • request access;
  • request correction;
  • request deletion;
  • obtain certain information in portable form;
  • object to certain processing;
  • restrict certain processing; or
  • withdraw consent where processing is based on consent.

Some information may be exempt from deletion or other requests where retention is required for legal, security, fraud-prevention, or compliance purposes.

Public blockchain data generally cannot be deleted by Immutifi.

To make a privacy request, contact [email protected].

We may need to verify your identity before completing a request.

17. United States State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under state law.

Where applicable, those rights may include:

  • confirmation of whether personal data is being processed;
  • access;
  • correction;
  • deletion;
  • portability;
  • information regarding certain disclosures; and
  • the ability to appeal certain privacy-request decisions.

We will honor applicable rights as required by law.

18. International Users

The Service may be accessed from multiple jurisdictions.

Information may be processed in the United States or other locations where our service providers operate.

Your use of the Service may be restricted based on jurisdiction, product availability, local law, sanctions requirements, or the policies of connected trading venues.

19. Legal Disclosures

We may preserve or disclose information when we reasonably believe doing so is necessary to:

  • comply with law;
  • respond to legal process;
  • protect users;
  • investigate fraud;
  • address security incidents;
  • enforce our agreements;
  • protect Immutifi’s rights or property; or
  • prevent harm.

20. Business Transfers

If Immutifi is involved in a merger, financing, acquisition, restructuring, bankruptcy, asset sale, or similar transaction, information associated with the Service may be transferred as part of that transaction, subject to applicable law.

Sensitive local credentials that were never held by Immutifi cannot be transferred by Immutifi.

21. Third-Party Links

The Service may contain links to third-party websites or services.

Immutifi is not responsible for their privacy practices.

You should review the privacy policy of each third party you use.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

We will post the revised policy with an updated effective date.

Where required by law, we will provide additional notice regarding material changes.

23. Contact Us

Questions or privacy requests may be sent to:

Immutifi, Inc.
Wyoming, United States
[email protected]