Privacy policy
Draft, pending legal review before launch
This is placeholder legal text prepared for site structure and tone. It has not been reviewed by a lawyer and must not be treated as final before Arbii accepts real deposits.
1. What we collect
- Your Telegram account identifier, used to identify you inside the Mini App.
- A verified email address, used for account recovery and as a second factor on withdrawals and sensitive actions.
- On-chain wallet addresses and transaction activity associated with your account.
- Basic usage and device data needed to operate and secure the Mini App (e.g. rate-limiting failed passcode attempts).
2. What we never collect
We never ask for, and our systems never store, your seed phrase, private key, or raw passcode. Signing keys are derived and used entirely on your device; our backend holds only a verifier used for rate-limiting, which cannot be used to reconstruct your signing key. If any message claiming to be from Arbii asks for a seed phrase or private key, it is not us. Treat it as an attempted scam.
3. Cookies and analytics
This marketing site uses cookieless, first-party analytics to understand traffic. No third-party advertising trackers, and no cross-site tracking.
4. Third parties we rely on
- An embedded-wallet infrastructure provider, to host and operate your key share under user-controlled custody.
- A transactional email provider, to deliver recovery and security codes.
- Cross-chain routing providers, to move deposits and withdrawals between chains.
Each is used only for the function described above. None of them receive your passcode, recovery code, or private key material.
5. What we don't do with your data
We don't sell your personal data. We don't expose your balances, deposit sizes, or withdrawal activity to anyone who referred you or whom you referred. Affiliates see referral status only, never financial details.
6. Data retention
Account and transaction records are retained as long as needed to operate your account and meet applicable legal and security obligations. On-chain activity is, by its nature, permanently public regardless of what we retain off-chain.
7. Your rights
Depending on your jurisdiction, you may have rights to access, correct, or request deletion of the personal data we hold about you (excluding on-chain records, which cannot be altered or deleted). Contact us through the support chat inside the Mini App to exercise these rights.
8. Changes to this policy
This policy may be updated from time to time. Material changes will be announced through the Mini App and Telegram notification channel before they take effect.