Privacy Policy

1. Introduction

UTAXO ("we," "us," or "our") respects your privacy and is committed to protecting the information associated with your use of our Service.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding that information. By using UTAXO, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information We Automatically Collect

When you use UTAXO, we may automatically collect:

• Wallet Addresses: Bitcoin wallet addresses you provide for analysis. These are publicly visible on the blockchain.
• Transaction History: Transaction data associated with provided wallet addresses, sourced from the public Bitcoin blockchain.
• IP Address: Your IP address for security, fraud prevention, and service functionality purposes.
• Browser and Device Information: Information about your browser type, operating system, and device for compatibility and troubleshooting purposes.

Information We Do NOT Collect

UTAXO does not collect:

• Social Security Numbers or Tax Identification Numbers
• Full legal names (unless you voluntarily provide them)
• Bank account or traditional financial account information
• Private keys or wallet seed phrases
• Passwords to external services

3. How We Use Your Information

We use the information we collect to:

• Generate portfolio analytics reports based on your wallet addresses
• Calculate cost basis using FIFO methodology
• Process cryptocurrency payments for the Service
• Improve and optimize the Service
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations
• Respond to your inquiries and provide customer support

4. Data Sources

To provide the Service, UTAXO retrieves data from the following sources:

• Public Bitcoin Blockchain: Transaction data, inscription data, and wallet balances that are publicly recorded on-chain.
• Best in Slot API: Ordinals, Runes, and BRC-20 collection data, sales history, and pricing information.
• Magic Eden API: Marketplace sales data and transaction history.
• Ordiscan API: Inscription metadata and transaction details.
• Mempool.space: Bitcoin transaction data and fee information.
• CoinGecko: Historical BTC/USD exchange rates for fair market value calculations.

5. Data Storage & Security

Local Processing: Where possible, data is processed locally in your browser to minimize data transmission and storage.

Payment Records: Payment transaction records are stored in our database for legal and tax compliance purposes.

Security Measures: We implement reasonable security measures including:

• SSL/TLS encryption for data in transit
• No storage of private keys or sensitive credentials
• No third-party analytics or tracking services (no Google Analytics)
• Limited access to stored data

While we implement reasonable security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

6. Data Retention

Report Data: Generated reports and analysis data are stored only for the duration of your session and are not retained after you close your browser unless you explicitly download them.

Payment Records: Payment transaction records are retained for seven (7) years as required for legal, tax, and accounting compliance purposes.

Usage and Access Logs: Server logs containing IP addresses and access patterns are retained for up to ninety (90) days for security and troubleshooting purposes, then automatically deleted.

Support Communications: If you contact us for support, those communications may be retained for up to three (3) years following resolution.

Deletion Requests: You may request deletion of your data by contacting us at support@utaxo.xyz. We will comply with deletion requests except where retention is required by law.

7. Third-Party Sharing

We may share information only in the following circumstances:

• Anonymized Aggregate Data: We may share anonymized, aggregated statistics that cannot identify any individual user.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or government request.
• Protection of Rights: We may disclose information to protect our rights, property, or safety, or that of our users or the public.

8. Cookies

UTAXO uses only essential cookies that are necessary for the Service to function properly, such as session management cookies.

We do NOT use:

• Third-party tracking cookies
• Advertising or marketing cookies
• Social media tracking cookies
• Analytics cookies (e.g., Google Analytics)

9. GDPR Compliance (EU Users)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

Personal Data: Wallet addresses may be considered personal data under GDPR if they can be linked to an identifiable individual.

Your Rights: Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Request erasure of your personal data
• Request restriction of processing
• Data portability
• Object to processing

Data Controller: UTAXO, a Delaware, USA company, is the data controller for the purposes of GDPR.

Contact for GDPR Requests: support@utaxo.xyz

10. CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, and disclose.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: You have the right to opt-out of the sale of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Contact for CCPA Requests: support@utaxo.xyz

11. Children's Privacy

UTAXO is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 18, please contact us immediately.

12. International Users

UTAXO is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

By using the Service, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy and applicable U.S. laws, which may differ from the laws of your country of residence.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users and any applicable regulatory authorities as required by law. Notification will be provided via email (if we have your email address) or through prominent notice on our website within seventy-two (72) hours of becoming aware of a qualifying breach.

14. Third-Party Links

The Service may contain links to third-party websites or services that are not owned or controlled by UTAXO. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised "Last Updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at: