Privacy Policy
AlertZero is a real-time DeFi position monitoring service for retail investors, operated by Defensahacker LLC ("AlertZero," "we," "us," or "our"). This policy explains what information we collect when you use our website, waitlist, and mobile app, why we collect it, and the choices you have. It applies to alertzero.io and the AlertZero mobile application (together, the "Service").
Summary at a glance
This section is a plain-language summary. The full sections below are what governs.
- We collect your email address when you request early access, and standard device/usage data when you use the site or app.
- The core function of AlertZero is to scan a public wallet address you provide, automatically detect the DeFi positions held by that address (vault deposits, LP positions, staking, lending collateral), and monitor the underlying contracts — this detected position data and your alert configuration are stored so we can notify you.
- We do not collect private keys, seed phrases, or wallet passwords, and the app never asks you to connect a wallet or sign anything — scanning is read-only and uses only public on-chain data.
- We use a small number of infrastructure providers (hosting, push notifications, blockchain data providers) to run the Service — listed in the Third-party services section.
- We do not sell your personal information.
- You can request access to, correction of, or deletion of your data at any time — see Your rights & choices.
Information we collect
Information you provide directly
- Waitlist / early access: the email address you submit through the "Request Early Access" form.
- Account information: if and when account creation is introduced, this may include an email address, display name, and authentication credentials (handled by our authentication provider — we never see or store raw passwords).
- Scanned addresses: the public wallet address(es) you submit for scanning.
- Detected position & watchlist configuration: the positions and underlying contracts our AI identifies from a scanned address (e.g. a vault deposit, an LP position, a lending position), the chain(s) involved, any custom labels you assign, and the alert rules you enable or disable for each.
- Support communications: anything you send us via email or in-app support requests.
Information collected automatically
| Category | Examples |
|---|---|
| Device & app data | Device type, OS version, app version, unique device/installation identifier, push notification token |
| Usage data | Screens viewed, features used, alert interactions, crash logs and performance diagnostics |
| Website data | IP address, browser type, referring URL, pages visited, approximate location derived from IP |
| Log data | Timestamps and error logs generated when the Service interacts with blockchain node providers on your behalf |
Information we do not collect
AlertZero monitors public, on-chain data. We do not request, and the app does not have any field for, your private keys, seed phrases, or wallet passwords. Adding a contract address to watch never requires connecting a wallet with signing permissions.
How we use information
- To provide, maintain, and improve the Service — including generating AI-suggested alert rules from a contract's ABI and threat pattern.
- To send you real-time push notifications and, where applicable, email notifications about events on contracts you watch.
- To respond to support requests and communicate about your account or the waitlist.
- To monitor, debug, and secure the Service, including detecting abuse or unauthorized access.
- To send product updates or early-access invitations, where you've opted in — you can unsubscribe at any time.
- To comply with legal obligations.
On-chain & contract data
Scanning is read-only: you provide a wallet address, and AlertZero reads only information already recorded on public blockchains — it never asks you to connect a wallet, grant a signature, or share a private key or seed phrase. The wallet address itself, the positions held by it, the contract addresses those positions involve, and related on-chain event data are public information visible to anyone with a block explorer; they are not private to you. What we treat as your data is the configuration layer around that public data: which address(es) you've scanned, the positions our AI detected and which of those you've chosen to keep watching, the labels you give them, and which alerts you've enabled. That configuration is linked to your account or device and is not shared publicly by us.
Third-party services
AlertZero is built on a small set of infrastructure providers, each with their own privacy practices:
| Provider type | Purpose |
|---|---|
| Blockchain node / RPC providers | Fetching contract ABIs, balances, and event logs (e.g. Alchemy, QuickNode) |
| Position-detection providers | Resolving a scanned wallet address into its underlying on-chain DeFi positions (e.g. vault deposits, LP positions, lending collateral) across chains |
| Push notification infrastructure | Delivering real-time alerts to your device (e.g. Firebase Cloud Messaging, Apple Push Notification service) |
| Hosting & infrastructure | Running the website and backend services |
| Analytics | Understanding aggregate feature usage to improve the product |
| Email delivery | Sending waitlist confirmations and, where opted in, product updates |
Current vendors include Alchemy and Zerion (on-chain and position data), Firebase / Google (authentication, analytics, and push delivery), Apple (Sign in with Apple and APNs), and our hosting providers. Each vendor processes data under its own privacy policy.
Data retention
We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Scanned addresses, detected positions, watchlist configuration, and alert history are retained for as long as your account is active, or until you remove a scanned address or your account. Waitlist email addresses are retained until early access is granted or you unsubscribe.
Security
We apply industry-standard technical and organizational measures — including encryption in transit, access controls, and secure credential storage — to protect the information we hold. As a security research firm ourselves, we take this seriously; however, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Your rights & choices
Depending on where you live, you may have some or all of the following rights:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct inaccurate or incomplete information.
- Deletion — ask us to delete your personal information, subject to legal exceptions.
- Portability — request your data in a portable format.
- Opt-out — unsubscribe from marketing emails at any time via the link in those emails, or disable push notifications in your device settings.
- Objection / restriction — object to or request restriction of certain processing, where applicable law provides for this.
To exercise any of these rights, contact us using the details in Contact us. We will respond within the timeframe required by applicable law.
International transfers
AlertZero may process and store information in countries other than your own, including infrastructure located in the United States and other jurisdictions where our service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect information transferred internationally.
Children's privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (such as an in-app or email notification).
Contact us
Questions about this policy or your data can be sent to:
Defensahacker LLC
contact@defensahacker.com