Privacy Policy

Scope and applicability

This Privacy Policy explains how Theo Research Ltd. processes limited data in connection with the use of theo.xyz, its sub-domains, and the Theo web application (collectively, the “Services”). By accessing or using the Services you consent to the practices described here. If you disagree, please discontinue use immediately.

Information we collect

We collect information in the following categories:

Public-blockchain information

• Wallet addresses you connect

• On-chain transaction hashes, token balances, and block timestamps

Technical & log data

• Ephemeral, coarse IP-derived country (for geoblocking and abuse-prevention)

• Browser and device type, referrer URL, basic usage analytics, and error logs

Cookies & local storage

• Session identifiers to keep you logged-in

• Banner-consent flags and lightweight UI preferences

How we use information

We use your information to:

• Operate, maintain, and improve the Services

• Render portfolio views and protocol metrics

• Enforce geographic and sanctions-based access restrictions

• Detect, investigate, and mitigate fraud, exploits, or Terms-of-Use violations

• Comply with applicable laws and legitimate legal requests

We do not sell your personal information.

How we share information

We may share your information with:

• Service providers: third‑party vendors who help us perform functions such as KYC verification, blockchain analytics, data storage, and customer support. These providers are required to use your information only to provide services to us.

• Affiliates and professional advisers: entities under common control with us, auditors, lawyers and other advisers.

• Regulators or law enforcement: to comply with applicable laws, court orders or regulatory requirements.

We may also share aggregated or de‑identified data that cannot reasonably be used to identify you.

Data retention and security

We retain personal information for as long as necessary to fulfill the purposes described in this Policy and to comply with legal obligations. We use administrative, technical and physical safeguards designed to protect your information from unauthorized access or disclosure. However, no security measures are perfect, and we cannot guarantee absolute security.

Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct or delete your personal information, object to or restrict processing, or request data portability. To exercise these rights, please contact us. We will respond as required by law. You may also control cookies through your browser settings as described in our Cookie Policy.

Changes to this Policy

We may update this Policy from time to time. When we make changes, we will update the “Last Updated” date and may notify you by posting a notice on the Site or other means as required by law.