Privacy policy

Scope and responsibility

This draft describes the current Serevin interface and its intended privacy practices for an international audience. A wallet address can be personal information when it identifies, or can be linked to, a person. Public blockchain data is not necessarily anonymous.

The legal operator, business contact details and designated privacy contact must be identified before this policy takes effect. Hosting locations, provider arrangements and log-retention settings also require confirmation. These pending details are not a claim that no personal information is processed.

Information used by the interface

When you connect a wallet, Serevin receives the public address and network information your wallet makes available. Wallet discovery may provide an extension name, identifier and icon. Serevin does not ask for or store your wallet signing private key or seed phrase.

For account views, Serevin processes the public address you connect or enter, together with returned balances, position shares and blockchain observations. For quotes, it processes the selected token addresses, input amount and the Uniswap slippage setting. The Route quote request uses its own fixed tolerance. Account or token addresses sent as query parameters can appear in network or infrastructure logs.

Browsing the public workspace does not create a saved portfolio. When the separate portfolio service is configured, explicit signed requests can store your public address, request parameters, challenge message and signature-related records, saved balance and position reports, alert rules and private inbox entries in PostgreSQL. These records can link an address to its service activity. Infrastructure providers may independently process IP addresses, timestamps, request URLs, device information and diagnostic records.

Market proposal drafts remain in the page until downloaded or submitted. A signed proposal submission stores the submitting address, proposal contents, evidence URL, signature and request message in PostgreSQL. Administrator review decisions and their signatures are also retained. Owners can retrieve their own proposals; the two configured reviewers can access the review queue. Submitted evidence URLs are not fetched automatically. Do not include private keys, personal contact details or confidential material in a proposal.

Why this information is used

Account and network information is used to show the requested balances and positions, distinguish a connected wallet from a watched address, manage the connection and check the selected network. Quote inputs are used to calculate routes for the requested trade size.

Appearance and connector preferences support your selected presentation and optional connection restoration. Providers may process operational information to deliver, protect and troubleshoot their services. If additional purposes or optional uses are introduced, the notice and any required choices must be updated before that processing begins.

Providers and public networks

A connected or watched address is sent to Serevin’s data endpoint and included in calls to the configured Robinhood Chain RPC service. Balances and recorded positions are read from public contracts, including the reviewed Morpho markets. Displaying a public address does not verify that you own it.

The hosted data service uses Alchemy as its primary blockchain RPC provider and Robinhood’s public RPC as a backup. These services receive the requested public addresses, contract calls and server connection metadata. The dedicated provider credential remains on Serevin’s server and is not sent to your browser or wallet.

Selecting Compare quotes also requests a quote from Route through Serevin’s server. That request sends chain ID 4663, the input and output token contract addresses and the input amount. Serevin does not forward your connected or watched wallet address, browser IP address, wallet credentials or transaction payload to Route. Route receives the server’s IP address and can process quote inputs, timestamps and other request metadata. This server-mediated request does not establish zero logging or retention by either provider.

If WalletConnect is enabled and selected, Reown/WalletConnect infrastructure and your chosen wallet help establish and maintain the session. The integration disables optional WalletConnect core telemetry. Connection metadata, QR-modal diagnostics and other provider processing can still occur; the setting does not establish zero tracking or zero retention.

The external Route link opens its homepage without a prefilled trade or wallet address. Once you follow that link, your browser connects directly to Route and can expose its IP address and browser information. Any wallet connection or trade there follows Route’s own interface, privacy practices and terms. Serevin does not embed that trading interface or forward a signing request.

Wallet providers, RPC services, hosting/CDN providers and external sites have their own privacy practices. Following an external link or authorizing a wallet connection can expose information to those providers. Processing may occur outside your country. The deployed provider list, locations, safeguards and retention arrangements must be confirmed before public release.

Browser storage and session data

The interface uses localStorage entries named serevin-appearance and serevin-wallet-connector for appearance and connector preference. A remembered connector can be used to request an already-authorized account silently. These preferences remain until replaced or removed through the application or your browser.

When used, the WalletConnect SDK can store pairings, sessions, client identifiers, deep-link preferences and transport-session cryptographic material in IndexedDB or browser-storage fallbacks. These connection keys are different from your wallet signing key or seed phrase.

When financial services are enabled, the interface records unfinished transaction intentions and hashes in IndexedDB under serevin-transaction-journal-v1. A record contains the public account, network, action, reviewed deployment digest, destination, calldata, amount, nonce and timestamps. It is written before a wallet send, survives a reload and coordinates tabs on this origin. It contains no wallet signing key and is not an authoritative balance ledger.

A completed operation removes its pending record. An interrupted record remains until its onchain outcome is checked and explicitly acknowledged. Connecting or disconnecting a wallet does not delete it. Clearing site storage or using another device removes or bypasses this local tracking, so reconcile your wallet history before starting another operation. Financial activation still requires an updated release notice and verified wallet flow.

The current application does not include an active first-party advertising or analytics integration. That statement does not describe every dependency or provider. Browser privacy settings may prevent storage or connection restoration.

Retention and deletion

The current data endpoints request no-store handling for responses and do not maintain an application wallet-history database. This does not prevent separate infrastructure logging. Specific hosting and provider retention periods have not yet been finalized and must not be assumed to be zero.

Disconnecting clears the application’s active wallet state and attempts to terminate a WalletConnect session when one exists. It does not necessarily revoke an extension’s site permissions, remove every SDK storage entry or delete provider logs. You can revoke permissions in your wallet and clear this site’s browser storage.

The portfolio service retains saved reports and member inbox entries for 30 days. Expired request challenges are removed after one day. Alert rules persist until the operator removes them under its approved retention policy; disabling an alert stops future checks but does not itself delete the record. Operator incidents and notification records persist for reconciliation. Market proposals and review events currently persist without automatic expiry so release decisions can be checked. Their retention period and deletion process require an operator policy before submissions open publicly. Database backups and provider logs can have different retention, which must be specified before launch.

Serevin cannot erase records from a public blockchain or delete records controlled independently by third parties. Onchain report hashes and credit-use events are public. The intended operator must provide an actual contact and process for applicable access and deletion requests; disconnecting a wallet does not delete a saved report or alert.

Your choices and applicable rights

You can browse general market information without connecting a wallet. Looking up a public address still sends that address to the data service. You can stop connection restoration by disconnecting, remove stored preferences and revoke permissions through your wallet.

You can browse the quote interface without requesting a Route quote. Route is contacted when you select Compare quotes, not merely when you edit an amount or token. Following the external Route link is a separate choice and opens that service directly.

Depending on applicable law, you may have rights to information, access, correction, deletion, objection, restriction, portability, withdrawal of consent or a complaint to a privacy regulator. These rights have conditions and exceptions. A public blockchain or independently controlled provider record may not be editable by Serevin.

Privacy choices and consent to personal-information processing are separate from agreement to service terms or acknowledgement of financial risk. Connecting a wallet is not consent to move funds or surrender legal rights.

Privacy requests and policy changes

The monitored privacy contact and responsible operator remain pending confirmation. No unverified email address is provided in this draft. A real contact and request-handling process must be published before the policy is put into effect.

Do not send a private key or seed phrase with a support request. Material changes should be identified with an updated version and effective date, and new consent obtained where required. Nothing in this policy removes privacy rights or duties that applicable law preserves.