Skip to main content
HolderOS

Privacy Policy

Last updated: June 2025

1. Overview

HolderOS ("we," "our," or "us") provides a token holder monitoring and blockchain analytics platform for crypto project teams. This Privacy Policy explains how we collect, use, store, and protect information when you use our services at holderos.com.

By using HolderOS, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

Account Information

When you create an account, we collect your display name, username, and a hashed password. We do not store plaintext passwords. We do not collect payment card data directly — payments are processed by our payment provider.

Workspace Data

Holder lists, wallet addresses, labels, risk notes, and CRM fields you enter are stored in your workspace. This data is associated with your account and stored on encrypted infrastructure, scoped to your workspace only — it is never pooled into a shared or cross-project holder database, and it is not used to train AI models or for marketing.

Only the team members you've given access to your workspace, and HolderOS staff for support, security, or maintenance purposes, can view it. You can replace an entire uploaded holder list at any time from the import screen, or remove it from Settings → Clear Workspace Data (removes holders, alerts, and exchange data) or Delete Workspace (removes everything, including your account).

Blockchain Data

HolderOS queries publicly available on-chain data from Solana and EVM networks via third-party RPC providers (including Helius). All queried wallet addresses are public by nature of the blockchain.

Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps for security monitoring and service improvement.

3. How We Use Your Information

  • Providing and operating the HolderOS platform
  • Generating blockchain analytics, risk scores, and weekly reports
  • Processing payments and managing subscriptions
  • Sending service notifications and account-related emails
  • Improving our risk scoring and detection algorithms
  • Detecting and preventing fraud, abuse, and security incidents
  • Complying with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising. We do not share your holder lists or workspace data with other users.

4. Data Storage & Security

Your data is stored on encrypted infrastructure (Neon PostgreSQL, hosted on AWS). Data in transit is protected by TLS. Access to production databases is restricted and logged. Passwords are hashed using a secure one-way algorithm and are never stored in plaintext.

Workspace data (holder lists, wallet labels, notes) is stored client-side in your browser's IndexedDB and/or localStorage, in addition to server-side. You can clear this data at any time from your browser settings or by clearing your workspace in the app.

5. Third-Party Services

We use the following third-party services:

  • Helius — Solana RPC provider for blockchain data queries
  • Neon — PostgreSQL database hosting
  • Vercel — Application hosting and deployment
  • NOWPayments — Cryptocurrency payment processing

Each provider is subject to their own privacy policy. We select providers with strong data protection practices.

6. Data Retention

Account data is retained while your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., payment records for 7 years per financial regulations).

Analysis job data (raw balance snapshots used during processing) is retained for 90 days and then automatically deleted.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Request deletion of your account and associated data
  • Export your workspace data
  • Object to certain processing of your data

To exercise these rights, email us at privacy@holderos.com.

8. Cookies

HolderOS uses a single session cookie (hw_session) to maintain your authenticated session. This cookie is HttpOnly, Secure, and SameSite=Strict. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy as our services evolve. We will notify users of material changes via email or an in-app notification. Continued use after the effective date constitutes acceptance of the updated policy.

10. Contact

For privacy questions, data requests, or concerns, contact us at: privacy@holderos.com