Privacy Policy

The data controller responsible for processing your personal data in connection with the Stakao platform is:

We collect only the data necessary to provide and improve the Service:

• -Account Data: Email address, used for authentication via Supabase and for important service notifications. If you sign in with Google, Google also shares your basic profile (name and picture).
• -Wallet Addresses: Your public SS58 Bittensor wallet address(es), and an Ethereum address if you sign in with an Ethereum wallet or pay for our agent API. We never collect, store, or request your private keys or seed phrases.
• -Strategy Configuration: Your staking preferences, subnet allocations, and strategy settings stored to enable automated execution.
• -Copilot Data: The questions you ask Copilot and its answers, saved in your conversation history, with counters that apply plan limits and help prevent abuse.
• -Billing Data: Subscription status and billing history. Payment card data is processed exclusively by Stripe and is never stored on our systems.
• -Blockchain Data: On-chain transaction history and staking positions associated with your wallet address. This data is publicly visible on the Bittensor network.
• -Usage Data: Technical logs (IP addresses, browser type, pages visited) used for security monitoring and platform improvement.

We use your personal data exclusively for the following purposes:

• -Providing, operating, and improving the Stakao platform.
• -Executing and monitoring your staking strategies on the Bittensor network.
• -Processing subscription payments and managing your account.
• -Sending service notifications (strategy alerts, billing receipts, important policy updates).
• -Responding to support requests.
• -Detecting and preventing fraud, abuse, and security incidents.
• -Complying with applicable legal obligations.

We do not use your data for targeted advertising, profiling for commercial purposes, or selling to third parties.

We process your personal data under the following legal bases pursuant to Article 6 of the GDPR:

• -Article 6(1)(b), Contract: Processing necessary for the performance of our contract with you (providing the Service, executing strategies, managing your account).
• -Article 6(1)(f), Legitimate Interest: Security monitoring, fraud prevention, platform analytics, and service improvement, where these do not override your fundamental rights.
• -Article 6(1)(c), Legal Obligation: Compliance with applicable French and EU law, including financial record-keeping obligations.
• -Article 6(1)(a), Consent: For any optional communications (e.g., product updates or newsletters), where you have explicitly opted in. You can update email preferences from your account or use the unsubscribe link included in non-transactional emails.

Some of our providers, listed in section 5, are established outside the European Economic Area (EEA) or may transfer data there. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• -Standard Contractual Clauses (SCCs) approved by the European Commission.
• -Adequacy decisions where applicable, for example the EU-US Data Privacy Framework for certified providers.

Please note that transactions broadcast to the Bittensor blockchain are processed by a globally decentralized network. We have no control over geographic data processing in this context, as it is inherent to the nature of public blockchain technology.

We implement appropriate technical and organizational measures to protect your personal data:

• -All data in transit is encrypted via HTTPS/TLS.
• -Database access is protected by Row Level Security (RLS) via Supabase, ensuring you can only access your own data.
• -We never store, transmit, or request your private keys or seed phrases at any point.
• -The non-custodial architecture means your funds remain in your wallet at all times; Stakao only holds a limited staking proxy.

Despite these measures, no system is completely secure. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority as required by law.

We retain your personal data only for as long as necessary:

• -Account Data: Retained for the duration of your account plus 3 years after closure, to fulfill legal and contractual obligations.
• -Billing Records: Retained for 10 years from the date of transaction, as required by French fiscal law.
• -Usage Analytics: Analytics and technical logs retained for up to 26 months, after which they are permanently deleted or anonymized.
• -On-Chain Data: Blockchain transactions are immutable and permanently recorded on the Bittensor network. This data cannot be deleted by Altion Labs.

Under the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights with respect to your personal data:

• -Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
• -Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete data.
• -Right to Erasure (Art. 17): You may request deletion of your personal data, subject to legal retention obligations. Note that on-chain blockchain data cannot be erased.
• -Right to Data Portability (Art. 20): You may request your data in a structured, machine-readable format.
• -Right to Object (Art. 21): You may object to processing based on legitimate interests at any time.
• -Right to Restriction (Art. 18): You may request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at support@stakao.com. We will respond within 30 days.

Stakao uses the following categories of cookies and similar browser storage:

• -Essential Cookies: Used by Supabase to keep you logged in, and by Stakao to remember your cookie preference, your display currency (EUR or USD) and, for visitors who are not signed in, the Copilot usage limit. Cloudflare may also set security cookies when it checks that a visitor is not a bot. These keep the service working and are set without a consent request.
• -Analytics Cookies: We use PostHog, hosted in the European Union, for privacy-focused analytics (page views, feature usage). These cookies are set only after you give your explicit consent via the cookie banner. If you reject, no cookie or identifier is stored on your device. No data is shared with third parties for advertising purposes.

No advertising or cross-site tracking cookies are used. Every cookie and browser storage item is listed in our Cookie Policy, where you can also manage your preferences.

The Stakao platform is intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a person under 18, we will promptly delete that data and terminate the associated account.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email at your registered address and update the "Last updated" date below. Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

For any privacy-related inquiries, data subject requests, or complaints, please contact:

If you believe your rights have not been upheld, you have the right to lodge a complaint with the French data protection authority: