o1bot.exchangeLegal
Privacy policy
o1bot.exchange ("we", "us") runs the X bot @o1bot_exchange and the website at o1bot.exchange. This policy explains what we collect when you use them, why, who else processes it, and what you can ask us to do. If anything here is unclear, write to hello@o1bot.exchange.
What we collect
When you sign in with X
Sign-in is handled by Privy. We receive your X user id, username, display name, and profile picture URL. We use the user id as your stable identity, because usernames change.
Your wallet
Privy creates an embedded Ethereum wallet for your account. We store the wallet address and a Privy wallet identifier so the bot can request signatures with your permission. We never receive or store your private key. We also record whether you granted the bot delegated signing and when.
Public posts that mention the bot
When a post on X mentions @o1bot_exchange, we store the post id, its text, the author's X user id and username, the URL of the first attached image, the language we detected, our parsed interpretation of the command, and the reply we sent. Posts that only mention the bot in passing are stored the same way so we can avoid replying twice.
Launches and signed transactions
For every launch we keep the token address, pool id, pair, amounts, transaction hashes, and timestamps. For every transaction the bot signs from your wallet we keep an audit record: the post id, your X user id, the wallet address, the destination contract, the kind of transaction, and a hash of the calldata.
Technical data
Our servers log requests to the website and API (IP address, user agent, timestamps, errors) to keep the service secure and working. These logs are kept for a short period and are not used for advertising.
How we use it
- To run the bot: read your command, check your account and balance, prepare and submit the launch, and reply to your post.
- To prevent abuse: rate limits per account, refusing reserved handles as fee recipients, and blocking spam.
- To show launches on the website: the board and token pages display the launching post and the account behind it.
- To comply with the law and respond to lawful requests.
We do not sell your data and we do not use it for advertising.
What becomes public and permanent
Blockchain transactions are public and cannot be deleted. Token metadata, including the token image and a record of the launching post (your X handle, X user id, and the post id), is pinned to IPFS, which is public and effectively permanent. Replies the bot posts on X are public. Think of a launch as publishing: do not include anything in a launch post or image that you would not want to be public forever.
Who else processes your data
- Privy handles X sign-in and custody of the embedded wallet's key material under its own security model and privacy policy.
- X (Twitter) provides the posts that mention the bot and delivers our replies, under X's terms and privacy policy.
- Anthropic processes the text of posts that mention the bot so our parser can turn them into launch commands. We send the post text, the author's handle, and whether an image is attached. We do not send wallet keys or balances.
- Pinata (IPFS) stores token images and metadata. Anything pinned there is public.
- RPC and hosting providers relay blockchain transactions and host the website; they see the technical data described above.
We only share what each provider needs to do its job.
Cookies and local storage
The website uses Privy's session storage to keep you signed in. We do not use advertising cookies or third-party trackers.
How long we keep data
- Account and wallet records: for as long as your account exists.
- Posts, launches, and the signing audit log: indefinitely, because they document who launched what and protect users and us against disputes.
- Server logs: up to 30 days.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold, and to object to some uses of it. Write to hello@o1bot.exchange from the email or X account concerned. We will delete off-chain data we control. We cannot alter or remove anything already on a blockchain or on IPFS, and we cannot delete data held by Privy, X, or Anthropic on your behalf; contact them directly for that.
Age
The service is for adults. If you are under 18, or under the age of majority where you live, do not use it.
Changes
We will update this page when the service changes in a way that affects your data, and we will change the date at the top. Material changes are announced from @o1bot_exchange.