Legal
Privacy Policy
Effective August 7, 2026
This policy explains how Sumiro, operating Boop, collects, uses, discloses, and protects information when you use the website, wallet interface, API, MCP server, analytics, share previews, and related services.
Information we collect
We collect wallet addresses, signed authentication challenges, transaction signatures, selected network, Booptags, contact labels, display names, email, country, payment activity, request metadata, selected assets, optional Round Up or yield settings, device and browser information, cookie choices, support messages, and security events. We never request or store seed phrases or private keys.
Sources and purposes
We receive information directly from you, from your wallet, from public Solana records, from Vercel Analytics where enabled, from payment or routing providers, from service providers, and from security systems. We use it to execute requested transactions, display history, prevent fraud, protect the treasury, enforce eligibility rules, respond to support requests, comply with law, and improve service reliability. Optional analytics run only after consent where consent is required.
Legal bases and consent
Where applicable, processing is based on contract, legitimate interests, legal obligations, protection of users and the service, or consent. You may withdraw consent for optional processing. Withdrawal does not affect processing already completed or information that must be retained by law.
Sharing
We may share limited information with infrastructure, hosting, database, security, analytics, payment, swap, legal, audit, and compliance providers. Solana wallet addresses and transactions are public by design. We may disclose information when required by law, to protect rights and safety, or as part of a corporate transaction. We do not sell personal information.
Retention and security
We keep information only as long as needed for the purposes described here, legal obligations, dispute handling, and fraud prevention. Security measures include encryption in transit, restricted service credentials, wallet signature verification, request limits, origin checks, audit events, and database row policies. No system can guarantee absolute security.
United States privacy rights
Depending on your state and whether its law applies to us, you may request access, correction, deletion, or a portable copy, and may opt out of covered sale, sharing, targeted advertising, or profiling. California residents may also request categories and specific pieces of personal information and receive equal service when exercising covered rights. Boop does not sell personal information. See the California Privacy Protection Agency rights summary.
Singapore PDPA
For individuals covered by Singapore's Personal Data Protection Act, we provide notice of purposes, limit collection and use to appropriate purposes, take reasonable protection measures, support access and correction requests, limit retention, and assess overseas transfers. The Personal Data Protection Commission describes these obligations.
International transfers
Information may be processed in the United States, Singapore, and other countries where our providers operate. Where required, we use contractual or other recognized safeguards intended to provide comparable protection.
Cookies
Essential storage remembers wallet session, network, security, and consent choices. Optional analytics storage is disabled unless accepted. You can change browser storage settings, but essential features may stop working.
Children
The service is not directed to children. You must meet the minimum legal age stated in the Terms. We do not knowingly collect personal information from children.
Requests and complaints
Submit privacy requests, appeals, or complaints to privacy@sumiro.com. We may verify control of a wallet by asking for a signed challenge. Authorized agents may be required to provide authority and identity verification. Singapore requests may be addressed to the Data Protection Officer at the same address.
Changes
We may update this policy. Material changes will be posted with a new effective date and additional notice when required.