This Privacy Policy explains what data DASHH (“we”, “us”) collects when you use dashhnew.vercel.app and related APIs, how we use it, and the rights you have over it.
DASHH is built to need as little personal data as possible. Your wallet address is your identity. We do not collect your name, email, phone number, government-issued IDs, or social-platform passwords.
1. Data we collect
1.1 From you, directly
- Wallet address. When you connect a Solana wallet (e.g. Phantom), we read your public key. We never see your private key.
- Signed messages. When you sign a Terms message or authenticate via Sign-In With Solana (SIWS), the signature is stored alongside the campaign/participation it belongs to.
- Campaign content. If you are a brand, the title, description, budget, and platform you choose when launching a campaign.
1.2 From third-party services (with your consent)
- Reclaim Protocol zkTLS proofs. When you submit a proof, Reclaim returns a cryptographically-signed object that attests to your view count on a target platform (Instagram, YouTube, X, TikTok). We store the proof object itself, plus the parsed metrics (view count, caption, handle).
- Solana blockchain. Every escrow funding, settlement, refund, and cancellation creates a public on-chain transaction. We index transaction signatures but do not own the underlying data — anyone can audit it on Solana Explorer.
1.3 Automatically
- Server-side logs. Standard request logs (IP address, user agent, route hit) for rate-limit enforcement and abuse prevention. Logs are retained for 30 days.
- Anonymous analytics. If enabled, we use privacy-preserving page-view analytics (PostHog) to understand which features users adopt. No personally identifiable information is sent.
- Error tracking. If enabled, runtime errors are captured (Sentry) for debugging. Stack traces may include truncated user state (wallet address) but never private keys.
2. What we do NOT collect
- Private keys, seed phrases, or wallet passwords
- Email addresses, phone numbers, or postal addresses
- Real names, dates of birth, or government IDs
- Bank account details or credit card numbers
- Your social-platform passwords or session cookies (Reclaim generates proofs without sharing these with us)
3. How we use your data
- Operate the platform. Match brands and creators, run the 13-rule disqualification pipeline, compute payouts.
- Enforce the rules. Track strike counts (3 strikes in 90 days = 90-day ban), prevent duplicate proofs, and detect view-bot signatures.
- Issue payouts. Send SOL from the platform escrow wallet to your creator wallet when proofs verify.
- Support and abuse response. Investigate disputes or suspected platform abuse.
4. Who we share data with
We do not sell or rent your data. We share with the following sub-processors strictly to operate the platform:
- Neon (Postgres database) — encrypted at rest and in transit. Region: us-east-1.
- Vercel (hosting) — serverless functions and static assets. Request logs may be retained per Vercel's policy.
- Reclaim Protocol — the zkTLS attestor that generates engagement proofs. Reclaim sees your social-platform session inside its secure environment; DASHH only ever sees the resulting proof.
- Arweave / Irys — we permanently anchor verified proof bundles for public auditability. Once written, an Arweave anchor cannot be deleted.
- Solana blockchain — all financial state is public.
5. International transfers
Our infrastructure is primarily hosted in the United States. By using DASHH from outside the US, you consent to data transfers in line with applicable data-protection law.
6. Your rights
- Access. Your wallet address gives you direct access to every record we hold about you via the platform UI.
- Deletion. Off-chain records (campaign metadata, notifications) can be deleted on request. On-chain transactions and Arweave anchors are immutable — we cannot delete those, by design.
- Portability. Your wallet, proofs, and on-chain transactions are already portable — you can read them yourself from any Solana RPC or Reclaim verifier without us.
- Withdraw consent. You can disable analytics + error tracking via the cookie banner at any time.
7. Children
DASHH is not intended for users under 18. We do not knowingly collect data from minors.
8. Changes to this policy
We'll update the “Last updated” date at the top of this page when we make material changes. Continued use after a change constitutes acceptance.
9. Contact
Questions about this policy or about your data? Reach the team on GitHub Issues.