Privacy Policy · Ethonode

This Privacy Policy explains how Ethonode ("Ethonode", "we", "us") collects, uses, and protects information when you use our crypto portfolio tracking service. By using Ethonode you agree to the practices described below.

1. Information we collect

Account data. Your email address and, optionally, the name you provide. We use Supabase Auth to store authentication credentials; we never see your plaintext password.
Public wallet addresses. Any blockchain addresses you choose to connect (Ethereum, EVM chains, Solana). These are public data by design.
Exchange API keys. If you connect an exchange (currently Coinbase), you provide read-only API credentials. These are encrypted with AES-256-GCM at rest before being written to our database.
Portfolio data. Token balances, transaction history, and portfolio snapshots derived from the wallets and exchanges you connect.
Usage data. Standard request logs (IP, user agent, page viewed, timestamps) used for debugging, abuse prevention, and capacity planning.
Billing data. If you subscribe to a paid plan, Stripe collects and stores your payment details. We receive only a customer identifier and subscription status — we never see or store card numbers.

2. How we use your information

To fetch and display live portfolio data from your connected wallets and exchanges.
To send the emails you have opted into, including price alerts and the weekly portfolio digest.
To operate account features such as workspaces, sheets, templates, and sharing.
To process subscriptions and handle billing events via Stripe.
To diagnose issues, maintain service health, and prevent abuse.

3. What we do NOT do

We never store private keys or seed phrases. Ethonode only reads public wallet addresses and read-only exchange API keys. We have no ability to move or trade your funds.
We never sell user data or share it with advertisers, data brokers, or marketing affiliates.

4. Data storage and security

All data is stored in Supabase (Postgres), which is hosted on Amazon Web Services. Data is encrypted at rest and in transit (TLS). Row-level security restricts each account's data to the authenticated user. Exchange API credentials are additionally encrypted at the application layer with AES-256-GCM before storage.

5. Third-party services

Ethonode relies on the following providers to deliver the service:

Supabase — authentication, Postgres database, row-level security.
Moralis — EVM wallet balances and transactions.
Helius — Solana wallet balances and transactions.
CoinGecko — live token prices.
Coinbase API — read-only account and transaction sync when you connect Coinbase.
Stripe — subscription billing and payment processing.
Resend — transactional and digest email delivery.
Vercel — application hosting and background cron jobs.

Each provider has its own privacy policy. We only send them the data necessary for the service they provide.

6. Your rights

You can disconnect any wallet or exchange at any time from your workspace.
You can delete your account and all associated data by contacting us at the address below.
You can request a copy of the data we hold about you.
You can opt out of non-essential emails (digest, marketing) from your account settings.

7. Children

Ethonode is not intended for users under the age of 18 and we do not knowingly collect information from children.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or in-app notification before taking effect.

9. Contact

Questions or data-deletion requests: denakpoagba@ethonode.com.