Privacy Policy
Last updated: 22 September 2026
Nunchi Ltd ("Nunchi", "we", "us" or "our") handles personal data in connection with our websites, documentation and hosted services that link to this Policy (the "Services"). This Policy explains what information we collect, how we use it and the choices available to you.
It covers our processing, including enquiries about the Nunchi SDK. Operators of independent networks and applications built with the SDK are responsible for their own privacy practices. Where we process personal data on a customer's behalf, the applicable data-processing agreement sets out our responsibilities.
1. Information we collect
The information we handle depends on the features you use:
- Contact information: your email address and any name, company information, project details or message you provide through enquiry forms or correspondence.
- Wallet information: wallet addresses you enter or connect, and public account or transaction information used to provide the feature you request.
- Sign-in and access information: account identifiers, access tokens, session records and permissions when you sign in or connect an application.
- Service activity: requests and information sent to Services we operate, with related timestamps, status and error records. Our servers and providers also receive technical information, such as IP addresses and browser information, when handling requests.
We receive information from you, from your use of the Services, and from public networks or providers involved in a feature you use. A wallet address and related activity can be personal data when linked to an individual.
Do not send private keys, recovery phrases or personal information that is unnecessary for your request.
2. How we use information
We use personal data to:
- Respond to enquiries and provide requested services and support.
- Manage accounts, access, authentication and permissions.
- Process requests made through the Services and connected applications.
- Maintain the Services, diagnose problems, protect security and prevent fraud or misuse.
- Comply with legal obligations and establish, exercise or defend legal claims.
Submitting an enquiry does not itself subscribe you to marketing.
Where applicable law requires a lawful basis, we rely on:
- Contract: processing necessary to provide a service to you or take steps you request before entering into a contract with you.
- Legitimate interests: communicating with business contacts, supporting organisational customers, and maintaining and protecting the Services, where those interests are not overridden by your rights.
- Legal obligations: processing required to comply with applicable law.
- Consent: processing for which we request your consent, including optional technologies where consent is required.
3. How we share information
We disclose personal data as needed to:
- Providers supporting hosting, enquiry handling, email, authentication, support and operation of the Services.
- Applications, wallets, networks or other recipients involved in an action or connection you request.
- Professional advisers, authorities or other parties where necessary to comply with law, protect legal rights or investigate unlawful activity.
- Parties involved in a proposed or completed merger, acquisition or transfer of business, subject to applicable safeguards.
- Other recipients at your direction or with your consent.
Information submitted to a public network may become publicly accessible. Independent wallets, AI clients and other applications process information under their own policies. This does not remove our responsibility for processing carried out by us or on our behalf.
4. Cookies and similar technologies
Depending on the feature, the Services use cookies, local storage and similar technologies to remember preferences, support authentication and maintain sessions. Where applicable law requires consent for an optional technology, we obtain it before use. Where an objection or opt-out right applies, we provide the required choice.
You can also manage browser storage through your browser settings. Blocking or clearing it may affect preferences or access. Clearing browser storage does not necessarily revoke credentials or delete information held on our systems.
5. Retention and security
We retain personal data for as long as reasonably necessary for the purposes described in this Policy. We consider the nature of the information, the purpose for which it was collected, the duration of our relationship with you, and applicable legal, security and dispute-resolution requirements. We delete or anonymise information when it is no longer needed, subject to lawful retention requirements and backup cycles.
We use technical and organisational measures designed to protect personal data. No system or transmission method is completely secure.
Records on independently operated public networks may remain outside our control. We assess deletion requests separately for personal data held on our own systems.
6. International processing
Our providers and other recipients may process personal data outside the country where you live. Transfers are subject to the safeguards required by applicable data-protection law. Contact us for information about the arrangements relevant to your data.
7. Your rights and choices
Depending on applicable law, you may have rights to access or obtain a copy of your personal data, correct it, request deletion, restrict or object to processing, obtain data portability, and withdraw consent. You may also have rights relating to certain automated decisions.
Where processing relies on consent, you may withdraw it by contacting us or using the relevant control. Withdrawal does not affect earlier lawful processing. We may continue separate processing for another purpose with its own valid legal basis. Disconnecting a wallet or revoking an integration does not automatically delete information already collected.
Where the California Consumer Privacy Act applies, rights may also include opting out of sale or sharing, limiting certain uses of sensitive personal information, using an authorised agent, and receiving non-discriminatory treatment for exercising your rights.
Send requests or privacy complaints to legal@nunchi.trade. We may request proportionate information to verify your identity or authority. We will not ask for your private key or recovery phrase. We respond within the period required by applicable law and explain any applicable exception.
Where UK data-protection law applies to a complaint, we acknowledge it within 30 days, make appropriate enquiries, keep you informed and explain the outcome without undue delay. You may also complain to a competent data-protection authority, including the UK Information Commissioner's Office or the relevant EEA authority. This Policy does not limit any statutory right or remedy.
8. Children
Our account-based and hosted Services are intended for adults. We do not knowingly collect personal data from children through those Services. If you believe a child has provided personal data to us, contact us so that we can investigate and take appropriate action, including deletion where required.
9. Changes to this Policy
We may update this Policy as our practices or legal requirements change. We will update the date above and provide additional notice where required. Where a new use requires consent, we will request it separately.
10. Contact
For privacy questions, requests or complaints, contact:
Nunchi Ltd
legal@nunchi.trade
1st Floor, The Sotheby Building
Rodney Village, Rodney Bay
LC 04 101, Gros Islet, Saint Lucia