Store the minimum.

01Overview

This Privacy Policy explains what information LensAI ("we", "us") collects when you use our website and application, how we use it, and the controls you have over it. LensAI is built to hold as little about you as possible.

Your identity on LensAI is a public wallet address, proven by a signature. We do not run traditional accounts, and we do not ask for your name, password or payment identity. An email address or Telegram chat is held only if you choose to receive watch alerts through it.

02Information we collect

Account identity: your wallet address (stored lowercased), the chain you connected, and timestamps for when the account was first seen and last used.

Research data: the tickers you analyze and the sessions and chat threads you create. This is the product, and it is stored so you can return to it.

Agent data: the conversations you have with the agents (stored with identifiers such as addresses, emails and handles scrubbed out), the watches you create with their compiled rule and a log of when each fired, a watchlist of token symbols, your timezone if you set one, and the timestamp of the market state you last viewed.

Alert contact, only if you opt in: an email address if you turn on email alerts, or a Telegram chat id if you link the alert bot. Removing the channel removes the detail.

Saved claim checks: text you paste for checking is processed and discarded unless you choose to save the result.

API keys: if you create one, only a one-way hash is stored. The key itself is shown once and cannot be recovered.

Operational data: minimal technical logs such as request and token counts, model used, per-day usage counts that enforce fair use, and whether a result was served from cache. These are used to run, secure and cost the service.

03Information we do not collect

We do not collect your name, password, phone number or government identifiers, and we hold no email address unless you turn on email alerts.

The agent service does not store IP addresses. Per-minute rate limiting is held in memory only and is never written down.

We do not store your on-chain balances, holdings or portfolio. If portfolio features are ever added, they are computed live from the public chain at request time and then discarded.

We do not persist the raw cryptographic signature you use to log in beyond the moment it is verified.

04How we use information

To provide the service: resolving tickers, gathering data, generating analyses, and letting you reopen your own history.

To scope and secure access: your wallet address is used to ensure only you can read your own sessions, and to enforce rate limits and the free tier.

To operate and improve: aggregate, non-identifying usage metrics help us understand cost and reliability. We do not sell your data or use your research history to advertise to you.

05Cookies & local storage

We use a strictly necessary session cookie (or equivalent local storage) to keep you signed in after you verify your wallet signature. It is not used for advertising or cross-site tracking.

We do not embed third-party advertising or analytics trackers that profile you across the web.

06Third-party services

To function, LensAI sends non-personal queries to third-party providers (market-data sources, news sources, and an AI model provider) to gather facts and generate analysis.

These providers process the ticker and gathered data needed to answer a request, not your identity. We do not share your wallet address with them for the purpose of the analysis.

The agents use more than one AI model provider, and some of those providers may use the prompts they receive to improve their models. For that reason no identifier of yours is ever placed in a prompt: your text is scrubbed of wallet addresses, emails and handles, and our systems refuse to send any prompt that still contains one. What a provider does receive is market data together with the text of your question, or the text you paste for a claim check, so do not include personal information in either.

If you turn on alerts, the message is delivered through Telegram or an email delivery provider, which necessarily receive the chat id or email address you gave us for that purpose.

07Data retention

We keep your account identity and research history for as long as your account exists, so the product is useful to you. Agent conversations that have been idle for 90 days are deleted automatically. Operational logs are kept only as long as needed to run and secure the service, then reduced or removed.

Market briefs the desk files are public, shared outputs keyed to the state of the market, not to any person. Nothing derived from your questions is ever written into them.

When you delete a session or your account, the associated data is removed as described below.

08Security

All secrets are held server-side and never exposed to your browser. Login nonces are single-use and short-lived, and signatures are verified against your address, the domain and the chain before a session is issued.

No system is perfectly secure, but we minimize what we hold precisely so that a compromise would expose as little as possible.

09International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers. Because we hold so little personal data, the exposure from any transfer is limited by design.

10Your rights

Depending on where you live, you may have rights to access, correct, export or delete your data, and to object to or restrict certain processing.

Because your identity is a wallet you control, you can exercise the most important right, deletion, yourself at any time, from within the app.

11Deletion & controls

You can delete any individual session, conversation, watch or saved claim check, or your entire account, at any time. Account deletion removes your sessions, messages, watchlist and free-tier records, and with them all agent data: conversations, watches and their trigger log, alert contact details, API key hashes, saved claim checks and usage counts.

You can export everything the agents hold about you as a single JSON file at any time.

Disconnecting your wallet ends the current session immediately. To make additional requests, contact us at privacy@scanbylens.xyz.

12Children

LensAI is not directed to children and is not intended for anyone under the age of majority in their jurisdiction. We do not knowingly collect data from children.

13Changes to this policy

We may update this policy as the product evolves or the law changes. Material changes will be reflected by updating the date at the top of this page. Continued use after an update constitutes acceptance of the revised policy.

14Contact

Questions or requests regarding this policy can be sent to privacy@scanbylens.xyz.