Your data.
Our responsibility.
01 — WHO WE ARE
ARCA ("we", "us", "our") operates the platform available at crypto-suite-frontend.vercel.app and base-alpha-landing.vercel.app, including BaseAlpha, future YieldPilot surfaces where available, and AgentForge (collectively, "the Platform").
This policy explains what data we collect, why we collect it, how long we keep it, and your rights regarding that data. We operate under private beta conditions — access is by invitation only.
02 — WHAT WE COLLECT
We collect only what is necessary to operate the Platform. Here is every category:
| DATA TYPE | WHAT EXACTLY | WHY |
|---|---|---|
| Wallet address | Your public Ethereum/Base wallet address (0x...) | Identify your account, gate subscriptions, link agents |
| On-chain activity | Token transfers from tracked whale wallets (public blockchain data) | Power BaseAlpha onchain intelligence alerts and trending visibility |
| Agent configuration | Strategy type, capital amount, custom parameters you set | Operate configured execution agents |
| Agent trade history | Simulated and configured execution records, where applicable (token pair, size, PnL) | Display performance metrics and charts |
| Subscription status | On-chain subscription tier and expiry (read from smart contract) | Gate Pro/Whale features |
| Risk agreement | EIP-191 signed message + timestamp when you accept risk terms | Tamper-evident record that you agreed before enabling applicable execution features |
| Telegram chat ID | Numeric Telegram chat ID (if you subscribe to alerts) | Send whale alerts to your Telegram account |
| Payment data | Processed by Stripe — card numbers and bank details are handled by Stripe, not intentionally stored by us | Fiat subscription billing |
03 — HOW WE USE YOUR DATA
Your data is used exclusively to operate and improve the Platform:
Agent operation — your wallet address, agent config, and trade history are used to support configured execution agents and display their performance.
Smart money intelligence — on-chain transfer data from tracked wallets (all public blockchain data) is aggregated to produce the BaseAlpha alert feed and trending tokens view.
Telegram notifications — your chat ID is used only to send alerts you explicitly subscribed to via the /start command. You can unsubscribe any time with /stop.
Billing — Stripe processes fiat payments. We receive a subscription status token from Stripe but do not intentionally store your payment details.
We do not sell, rent, or share your data with any third party for marketing purposes.
04 — HOW LONG WE KEEP IT
| DATA TYPE | RETENTION PERIOD |
|---|---|
| Alpha alerts | 7 days — auto-pruned daily |
| Agent trade history | Until you delete the agent or request deletion |
| Agent configuration | Until you delete the agent |
| Risk agreement record | 12 months from signing (operational and governance retention policy) |
| Telegram subscriber record | Until you /stop or request deletion |
| On-chain subscription status | Read live from blockchain — not stored by us |
05 — THIRD-PARTY SERVICES
We use a small number of infrastructure providers. Each handles data only as necessary to provide their service:
| SERVICE | PURPOSE | DATA SHARED |
|---|---|---|
| Supabase | Database (PostgreSQL) | All structured data listed above |
| Railway | Backend hosting | Application logs intended to exclude user PII |
| Vercel | Frontend hosting | Hosting/access logs as provided by Vercel, subject to provider configuration |
| Alchemy | Base blockchain RPC | Wallet addresses queried for on-chain data |
| Coinbase CDP | Agent wallet infrastructure | Agent wallet addresses for configured execution activity |
| Stripe | Payment processing | Payment details handled by Stripe; we do not intentionally store these |
| Telegram | Alert notifications | Chat ID (only if you subscribe) |
06 — BLOCKCHAIN DATA NOTICE
The onchain intelligence feed (BaseAlpha) is built entirely from public blockchain data. No private transaction data is used.
07 — YOUR RIGHTS (GDPR)
If you are in the European Economic Area (EEA) or United Kingdom, you have the following rights:
Access — request a copy of the data we hold about your wallet address.
Deletion — request deletion of your agent data, trade history, and Telegram subscription. Note: on-chain data cannot be deleted (see section 06).
Correction — request correction of inaccurate data we hold.
Portability — request your data in a structured, machine-readable format.
Objection — object to processing of your data.
To exercise any of these rights, contact us using the details in section 09. We will respond within 30 days.
08 — SECURITY
We apply industry-standard security measures: HTTPS-only transport, HTTP security headers (CSP, HSTS, X-Frame-Options), rate limiting on all API endpoints, locked CORS to known origins, and isolated CDP wallets per agent.
Agent execution wallets are managed by Coinbase Developer Platform (CDP) inside Nitro Enclaves — private keys are intended to remain isolated from application runtime access. Each agent has a dedicated isolated wallet; funds cannot be commingled between agents.
09 — CONTACT
For privacy requests, data deletion, or questions about this policy:
10 — CHANGES TO THIS POLICY
We may update this policy as the Platform evolves. Material changes will be announced via the Telegram bot to all subscribers. The effective date at the top of this page will always reflect the latest version.
Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.