Privacy Policy

How Vuken collects, uses, and protects your personal information. We are committed to minimal data collection and maximum user privacy.

Effective Date: May 25, 2026 · Last Updated: May 25, 2026

1. Our Commitment to Privacy

Vuken is designed around a core principle: you should not have to sacrifice privacy to access financial tools. We collect the minimum data necessary to operate the Service and never sell or share your information with third parties for marketing purposes.

2. Information We Collect

2.1 Information You Provide

Data	Purpose
Email address	Account authentication and security notifications
Password (hashed)	Account authentication — stored as a bcrypt hash, never in plaintext
Webhook URL	Delivering on-chain event notifications to your endpoint
API Key names	Labeling your network API keys for identification

2.2 Information Collected Automatically

Data	Purpose
IP address	Rate limiting, fraud detection, and security logging
Browser / User-Agent	Security anomaly detection
Timestamps of API requests	Audit logging and debugging

2.3 What We Do NOT Collect

Government-issued identity documents
Real name or physical address
Payment card details (subscriptions are billed on-chain in TRX)
Biometric data
Location data beyond IP-level geolocation

3. How We Use Your Information

We use the information we collect to:

Authenticate your account and protect against unauthorized access
Deliver on-chain event notifications to your configured Webhook URL
Operate rate limiting and fraud detection mechanisms
Maintain audit logs for your own account review
Comply with applicable legal obligations

We do not use your data for:

Targeted advertising
Behavioral profiling
Sale or sharing with data brokers

4. Data Storage and Security

4.1 Encryption

All API keys and network keys are encrypted at rest using AES-256-GCM
Developer API Tokens are displayed only once at creation and stored as a non-reversible hash
All data in transit is protected by TLS 1.2+

4.2 Access Controls

Access to production databases is restricted to authorized personnel only. All access events are logged and audited.

4.3 Retention

Category	Retention Period
Account data	Until account deletion
API request logs	90 days
Webhook delivery records	30 days
Security / audit logs	1 year

5. Blockchain Data

Wallet addresses, transaction hashes, and on-chain activity are public by nature on the TRON blockchain. Vuken does not control blockchain data and cannot delete or modify it.

6. Cookies and Tracking

Vuken uses only functional session cookies required for authentication. We do not use advertising cookies, analytics trackers, or third-party tracking pixels.

7. Third-Party Services

Vuken may use the following infrastructure providers:

Cloud hosting (servers and databases)
TronGrid (TRON RPC endpoints, if you configure a TronGrid API key)

These providers are contractually obligated to maintain confidentiality and security. We do not share personally identifiable information with them beyond what is necessary to operate the Service.

8. Your Rights

Depending on your jurisdiction, you may have rights including:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your account and associated personal data
Portability: Request your data in a machine-readable format
Objection: Object to certain processing activities

To exercise any of these rights, contact us at privacy@vuken.io.