Privacy Policy

1. Who We Are

DEPH (“we”, “us”, “our”) operates the website at deph.io and the associated token-migration tool, early-access programme, and careers portal. This policy explains what personal data we collect, why we collect it, and how we protect it.

2. Data We Collect

2.1 Information You Provide

• Early-access requests: name, email address, role (e.g. individual, lab, developer, investor), and an optional message.
• Job applications: name, email address, position applied for, optional portfolio / LinkedIn / GitHub URL, and an optional cover message.
• Token migration: Ethereum wallet address, transaction hash or link, token amount, social media handle, and chosen social platform (Telegram or X).

2.2 Information Collected Automatically

• IP address — recorded when you submit a form, used solely for abuse prevention.
• User-agent string — browser and device information sent with each request.
• Theme preference — stored locally in your browser (localStorage) to remember your light/dark mode choice. This data never leaves your device.

2.3 Wallet Data

When you connect a wallet via WalletConnect, your public wallet address is shared with our front-end to facilitate the migration process. We do not have access to your private keys, seed phrases, or the ability to initiate transactions on your behalf.

3. How We Use Your Data

• To process and verify token migration submissions.
• To evaluate early-access requests and contact applicants.
• To review job applications and communicate hiring decisions.
• To detect and prevent fraud, abuse, or duplicate submissions.
• To improve the website and our services based on aggregate, anonymised usage patterns.

4. Data Storage and Security

All form data is stored in a MongoDB Atlas database with encryption at rest and in transit (TLS). Access to the database is restricted to authorised personnel and protected by strong credentials and IP allowlisting. We retain your data only for as long as necessary to fulfil the purposes described above or as required by law.

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share limited data with:

• Infrastructure providers (e.g. MongoDB Atlas, Vercel) that host and deliver the website, under their own privacy policies and data processing agreements.
• Blockchain networks — wallet addresses and transaction hashes are publicly visible on Ethereum by design. We do not control this visibility.
• Legal authorities if required to comply with applicable law, regulation, or legal process.

6. Cookies and Local Storage

This website does not use tracking cookies or third-party analytics. We use browser localStorage exclusively to persist your theme preference (light or dark mode). No personally identifiable information is stored in localStorage.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is consent-based.

To exercise any of these rights, contact us at privacy@deph.io. We will respond within 30 days.

8. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this page periodically.

10. Contact

If you have questions about this privacy policy or your personal data, reach out to us at privacy@deph.io.