Privacy

Draft for legal review. This text has not yet been reviewed by a lawyer (crypto.arch: compliance items need a qualified lawyer before launch).

Sign-in is through BAPC (bapc.app); Cradara receives your name and email.
Anonymous checks are counted with a daily-changing hash of your IP address; the address itself is not stored.
Wallet addresses you add are public chain data; exchange API keys are encrypted with per-key envelope encryption and never logged.
Private AI mode sends no wallet addresses or amounts to the AI model.
Retention: alerts and request logs 12 months; evidence bundles about public tokens are kept as an audit record.
Deletion on request: Settings → Delete my account removes your personal data straight away.