Privacy Policy
Last updated: 16 October 2026
This policy explains what personal data RevoX ("we") collects when you use revox.live and the RevoX Telegram bot, why, and what choices you have. We follow the Kenya Data Protection Act, 2019 and, where it applies to you, the EU/UK GDPR.
1. Data we collect
- Account data: email address, username, a hashed password (we never store the password itself), and the sign-in method you use. With Google sign-in we receive your Google account ID, email, whether it is verified, and your name. With Telegram we receive your Telegram ID and username. With wallet sign-in we receive your public wallet address.
- Wallet data: public addresses of your RevoX wallets and profit vault, and their private keys in encrypted form (see section 3). If you import a wallet by recovery phrase, the phrase is used only in memory to derive the keys and is never saved.
- Activity data: trades, orders, bot rules, copy-trade settings, tracked wallets, coin launches, calls, notifications, fees and settings, so the Service can work and show your history and PnL.
- Technical data: IP address, browser type, and security logs (for example login attempts and sensitive actions such as withdrawals or key exports).
- Browser storage: small local settings on your device (recently viewed coins, watchlist, chart drawings, layout). This stays in your browser.
2. Public blockchain data
Blockchains are public. Transactions you make from any wallet, including RevoX wallets, can be seen by anyone, forever. Features such as Wallet X-ray, holder lists, bubble maps and the big-buy banner show public on-chain activity of wallet addresses; they never show who owns a wallet. You can stop your RevoX wallets from appearing in Wallet X-ray lookups and in the big-buy banner in Settings → Privacy.
3. How we protect your keys and data
- Private keys are encrypted with libsodium (XSalsa20-Poly1305) using a master key kept outside the database. Nobody, including our admins, can view your keys in the admin panel.
- Exporting a key or withdrawing needs your account password, and these actions are logged.
- Connections use HTTPS. Access to servers and databases is restricted.
No system is perfectly secure. Keep your password and recovery phrases private and use a dedicated trading wallet.
4. Why we use your data
- To create and secure your account, sign you in and run the trading features you ask for (performance of our contract with you).
- To prevent fraud, abuse and attacks, and to keep the Service reliable (legitimate interests).
- To meet legal, tax and regulatory duties (legal obligation).
- To send you notifications you switch on, such as launch reminders (consent / your settings).
We do not sell your personal data and we do not use it for third-party advertising.
5. Services we share data with
To work, the Service sends requests to third parties, which receive only what each request needs: blockchain RPC providers (such as Helius and public RPCs), trading and data services (Jupiter, PumpPortal, pump.fun, KyberSwap, LI.FI, GeckoTerminal, CoinGecko, Bubblemaps), Pinata/IPFS for coin images, Google and Telegram for sign-in, and our hosting provider. Wallet addresses and transactions sent to blockchains become public. We may disclose data if the law requires it.
6. How long we keep data
We keep account and trading records while your account is open and for as long as the law requires afterwards (typically up to 7 years for financial records). Security logs are kept for a shorter period. Cached market data is deleted automatically.
7. Your rights
You can ask to access, correct, export or delete your personal data, object to some uses, or withdraw consent. Before deleting an account, withdraw your funds or export your keys: once your account and keys are deleted we cannot recover them. Blockchain records cannot be deleted by anyone. You can also complain to the Office of the Data Protection Commissioner (Kenya) or your local regulator.
8. Cookies
We use one essential session cookie to keep you signed in and protect forms (CSRF protection). We do not use advertising or tracking cookies.
9. Children
The Service is only for people aged 18 or over. We do not knowingly collect data from children.
10. Changes and contact
We may update this policy; the date above shows the latest version. For privacy questions or requests, contact us through the RevoX Telegram bot or the support channel listed on revox.live. See also our Terms of Use.
