Privacy notice
Draft — requires legal review
About this draft
Draft — requires legal review. This notice must be checked against Echo’s actual data flows. The controller’s legal identity, contact information, retention periods, legal bases, international transfer arrangements and applicable rights remain to be completed.
Information used to run Echo
Echo may process account usernames, login and session information, wallet addresses, trading instructions and records, saved preferences, tracked-wallet lists, device/network information and support requests. Wallet security and recovery material require separate controls and should never be submitted in support messages.
Why information is used
The service uses information to authenticate accounts, operate wallets and trades, provide charts and tracking features, calculate fees, investigate failures, protect against abuse and meet applicable obligations. Optional analytics or marketing uses must be documented separately before activation.
Providers and public blockchains
Hosting, authentication, wallet infrastructure, RPC, market-data and monitoring providers may process information needed to supply their services. Public wallet addresses and transactions sent to Solana are visible on a public ledger. Removing an Echo account cannot erase blockchain records. The final notice must list the providers and sharing practices actually used.
Browser storage and retention
Cookies and browser storage may maintain sessions and preferences. Operational logs and trading records may be retained for security, accounting and legal purposes. Exact retention periods and deletion procedures must be established; this draft does not promise immediate deletion of every record.
Your choices and requests
Depending on where you live, you may have rights to access, correct, delete, restrict or obtain a copy of personal information and to complain to a regulator. Publish a verified privacy contact and request process before adopting this notice. Do not send private keys to request assistance.
Security
Echo should limit access to account and wallet information, protect it in transit and storage, and maintain recovery and incident-response procedures. No online service can guarantee complete security. This draft is not a certification of the deployed controls.