Privacy Policy

Effective date: January 1, 2025 — Gexiro Global Enterprises Ltd

1. Data We Collect

When you use ExpoScore, we collect:

• Account data: email address, hashed password, tier, scan count
• Scan data: blockchain addresses you submit (public data), scan results
• Usage data: API call timestamps, IP address (for rate limiting), browser type

2. Blockchain Addresses Are Public Data

Blockchain addresses are inherently public. ExpoScore analyzes publicly available on-chain data. ExpoScore does not enrich submitted addresses with off-chain identity data or attempt to identify address owners. If you scan while logged in, submitted addresses and results are associated with your account only to provide scan history, quota enforcement, retention, export, and deletion features.

3. How We Use Your Data

• To provide and improve the Service
• To enforce rate limits and prevent abuse
• To send transactional emails (account, billing)
• To aggregate anonymized usage statistics

4. Data Retention

Free tier scan results are retained for 30 days. Pro tier: 90 days. Business tier: 1 year. Account data is retained until account deletion.

5. Third Parties

We use Stripe for payment processing. Your card data is never stored on our servers. We do not sell or share personal data with advertising networks.

6. Cookies

We use a single httpOnly session cookie for authentication. No tracking cookies. No analytics cookies without consent.

7. Your Rights

You may request access to, correction of, or deletion of your personal data through the contact form.

8. Global Privacy Signal (GPC)

We honor the Global Privacy Control (GPC) signal. If your browser sends Sec-GPC: 1, we treat it as a Do Not Sell / Do Not Share request.

9. Contact

Data controller: Gexiro Global Enterprises Ltd, Gibraltar, Gibraltar. Contact: contact form