> ## Documentation Index
> Fetch the complete documentation index at: https://docs.microset.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Policy

> What data Microset stores, where it lives, and how long we keep it.

<Info>
  **Effective date:** May 1, 2026 · **Version 1.0**. This Data Policy is a quick
  reference for how Microset handles data in practice. It complements the
  [Privacy Policy](/legal/privacy-policy), which is the full statement of your
  rights and our practices.
</Info>

## On-chain vs off-chain data

Microset is non-custodial and blockchain-based, so data lives in two places:

| Where                       | What                                                   | Properties                                    |
| --------------------------- | ------------------------------------------------------ | --------------------------------------------- |
| **On-chain (Solana)**       | Wallet address, predictions, claims, market state      | Public, permanent, not controlled by Microset |
| **Off-chain (our backend)** | Account/session data, app preferences, support records | Private, stored by us, deletable on request   |

## What we store off-chain

| Data                                | Purpose                                        | Retention                   |
| ----------------------------------- | ---------------------------------------------- | --------------------------- |
| Wallet public address               | Link activity to your session and profile      | While the account is active |
| Sign-in signature / session token   | Verify wallet ownership and keep you signed in | Session duration            |
| Prediction / claim history (cached) | Display your positions and history in the UI   | While the account is active |
| Device & log data                   | Security, debugging, abuse prevention          | Up to 12 months             |
| Support correspondence              | Respond to and track your requests             | While the account is active |

We do **not** store private keys or seed phrases.

## What we never collect

* ❌ Private keys
* ❌ Seed / recovery phrases

## Sub-processors

We use third parties to operate the Service. The current list:

| Provider                    | Role                                   | Data shared                            |
| --------------------------- | -------------------------------------- | -------------------------------------- |
| Privy                       | Wallet connection & authentication     | Wallet address, authentication signals |
| Solana RPC provider         | Read chain state / submit transactions | Wallet address, transaction data       |
| Database provider (MongoDB) | Store off-chain application data       | Off-chain data listed above            |
| Hosting provider (Railway)  | Run the backend API                    | Operational data                       |

## Storage and security

* Sensitive credentials (such as authentication tokens) are held in encrypted storage.
* Access to off-chain data is restricted to authorized personnel and systems.
* All data in transit is encrypted (HTTPS/TLS), with restricted access to production systems and regular backups.

## Data retention and deletion

We keep off-chain data only as long as needed to operate the Service and meet legal
obligations, then delete or anonymize it. You can request deletion of your
off-chain data by contacting [tech@microset.io](mailto:tech@microset.io).

<Warning>
  On-chain data (your wallet address and transactions) is public and permanent. It
  cannot be edited or deleted, including on deletion requests.
</Warning>

## International processing

Data may be processed in countries other than yours, with appropriate safeguards
where required.

## Changes

We may update this Data Policy. Material changes will be posted here with a new
"Last updated" date.

## Contact

Data questions or deletion requests: [tech@microset.io](mailto:tech@microset.io).