1. Introduction
Archive Labs Inc. ("Archive Labs", "we", "our", or "us") operates 0xArchive. This Privacy Policy explains how we collect, use and disclose information through our website and services.
0xArchive is operated by Archive Labs Inc., a Delaware corporation.
2. Information We Collect
Account Information
Depending on how you register and use your account, we collect:
- Email address
- Name or username, if provided
- Password, stored as a hash
- Profile information from GitHub or Google if you use those sign-in methods
- Wallet address if you use wallet sign-in
- Email and communication preferences
Usage Information
We collect service and usage information, including:
- API request records, such as endpoints accessed, timestamps and response codes
- IP addresses, browser and device information
- Page visits, feature interactions, errors and conversion events
- Referral and campaign information
- Browser, session and event identifiers used to connect visits, product activity and transactions
Some of this information comes from our own service records. Some comes from browser measurement tools, depending on the tool and your settings. Cookies, local storage and related technologies are described in section 8.
Payment Information
Stripe processes card payments. We receive billing and transaction information from Stripe to manage payments, subscriptions and account access.
For USDC payments on Base through the x402 protocol, we record your wallet address, transaction hash and payment amount. On-chain transactions are publicly visible.
0xArchive never asks for seed phrases or private keys and does not custody customer funds.
Contact and Support Information
When you contact us or submit a Contact or Enterprise form, we collect the contact details and message you provide. These may include your name, email address and company.
0xArchive Terminal
When you use the 0xArchive Terminal at terminal.0xarchive.io, we also collect:
- Wallet addresses you sign in with or link, and the agent addresses you approve
- The record of each Terms acceptance and trading attestation: the signed message, its signature, the Terms version and the time
- Your IP address and the country, area and network operator it maps to, used to apply the trading eligibility rules in the Terminal Terms
- The results of screening your wallet addresses against the U.S. Treasury's OFAC sanctions list
- Your Terminal account, layouts and saved settings
- Scripts you write, and the mandates, orders and activity of server-side trading
- Alert destinations you connect, such as Telegram or Discord
New Terminal accounts may be asked to pass a Cloudflare Turnstile human check. Your trades, positions and wallet activity on Hyperliquid are public on its blockchain. Acceptance, attestation, screening and trading records are kept after account closure as part of the audit records described in section 6.
3. How We Use Your Information
We use information to:
- Provide and maintain our services
- Process transactions and manage subscriptions
- Send account, service and security messages
- Send product updates, research and other marketing communications where permitted, subject to your email preferences
- Account for usage, enforce limits and prevent abuse
- Understand product use, acquisition and conversions
- Diagnose errors and improve our services
- Respond to inquiries and support requests
- Comply with legal obligations and protect our rights
Marketing messages may be enabled by default where permitted. You can opt out through your email preferences, the unsubscribe option in a marketing message, or by contacting us. Opting out of marketing does not stop account, billing or security messages needed to provide the service.
4. Information Sharing
We may disclose information to:
- Service providers: Providers that support hosting, infrastructure, security, communications and customer support, including the email and Telegram services used for support correspondence.
- Payment processors: Stripe for card payments. On-chain transaction information for USDC/x402 payments is publicly visible on Base.
- Analytics providers: Google Analytics (GA4), Ahrefs Web Analytics and PostHog help us measure website and product use, attribution and conversions. PostHog product events may be associated with your account ID, email address and name when that tool is enabled.
- Error monitoring: Sentry receives error reports, including the type of failure, the app release and limited technical context, so we can find and fix problems.
- Advertising and marketing providers: When configured, OpenAI Ads and Google Ads support advertising measurement, Apollo.io supports company-level visitor enrichment, and HubSpot supports marketing tracking. OpenAI Ads conversion reports include conversion events and hashed email rather than raw email. HubSpot may receive the name and email you submit through Contact or Enterprise forms when ad measurement is on for you under section 8. Hashed identifiers are not necessarily anonymous.
- Legal and safety recipients: When required by law or to protect our rights, users or services.
- Business-transfer recipients: In connection with a merger, acquisition or sale of assets.
PostHog session replay, when it runs under the cookie rules in section 8, covers public pages and a privacy-masked dashboard. We configure replay masking and exclusions for inputs, account details, credentials and private assistant content. Fixed interface text and public images may remain visible. Replay masking is separate from the account information used in identified product-event profiles.
Advertising measurement can include browser events and server-side conversion reports. Server-side reports may use hashed identifiers to connect conversions with advertising activity. Section 8 explains the browser controls.
5. Data Security
We use technical and organizational measures to protect personal information, including encryption in transit, password and API-key hashing, access controls and monitoring.
6. Data Retention
We retain your account information for as long as your account is active. API usage, billing, authentication and audit records are retained for service administration, usage accounting, security and compliance, including after account closure. You may request deletion of your account and associated data at any time.
We delete identifiable feedback and related delivery records from our feedback database, support inbox and CRM within three years. You can request earlier deletion at privacy@0xarchive.io. De-identified product insights may be kept longer.
7. Your Rights
Depending on your location, you may have the right to:
- Access your personal information
- Correct inaccurate data
- Delete your account and data
- Export your data
- Opt out of marketing communications
To exercise these rights, contact us at privacy@0xarchive.io.
8. Cookies and Tracking
We use cookies, local storage and related technologies for account access, security, checkout, consent preferences, measurement and attribution.
Optional measurement depends on where you are. In the European Economic Area, the United Kingdom, Switzerland and Quebec, optional cookies stay off until you allow them. In California, analytics runs by default, and session replay and ad measurement run only after you select Accept on our cookie notice or enable them in Cookie settings; Decline turns off all optional cookies. Elsewhere, analytics, session replay and ad measurement run by default. You can change or withdraw your choices at any time through Cookie settings in the site footer. We use an approximate location derived from your IP address to apply these rules and store it in an essential cookie.
- Essential and functional storage: Account, security, checkout and consent workflows use the state needed for those features.
- Analytics storage and replay: The Analytics choice controls optional provider cookies and storage for GA4 and PostHog, and PostHog session replay.
- Ad measurement: When configured, the OpenAI Ads pixel, Google Ads conversion measurement, Apollo.io and HubSpot support advertising and marketing measurement. Browser-side ad measurement follows the Performance measurement choice and the regional defaults above. Apollo and HubSpot are limited to public marketing routes, not authenticated account pages.
- Personalized ads: When configured, Google ad personalization and remarketing follow the Personalization choice and the regional defaults above.
Ahrefs Web Analytics is cookie-free. Google measurement can send event information while analytics-cookie storage is denied. Measurement without optional cookies can continue and may still involve the usage information and identifiers described in section 2; it is not necessarily anonymous.
The 0xArchive Terminal measures product use, performance and errors without setting cookies or storing identifiers in your browser. It uses a temporary identifier for each visit and, when you are signed in, your account ID. This measurement is not controlled by the website's cookie choices.
Your browser choices do not switch off account, API usage, billing, authentication and security records used to administer, deliver and protect the service. Server-side conversion reporting is described in section 4.
Some analytics and advertising providers may collect information about online activities over time and across websites or services.
We treat a Global Privacy Control signal from your browser as a request to opt out of ad measurement and personalized ads, unless you later enable them in Cookie settings. A Do Not Track signal does not change measurement on our site. Use Cookie settings to set the optional browser choices described above. You can also clear cookies and local storage through your browser settings.
9. International Transfers
We and our service providers may process information in the United States and other countries where we or they operate. Privacy laws in those countries may differ from those in your country. Contact privacy@0xarchive.io with questions about international processing.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy, contact us at:
Mailing address: PO Box 194, Troy, NH 03465, US.
Registered agent for service of process: Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, US.