Version 1.0 · Effective 22 Sep 2026

Metatron Launchpad — Privacy Policy

Version 1.0 · Effective 22 Sep 2026 · Beta

In short

We collect what we need to run the Service: your email, the wallet addresses you connect (which are public on-chain), the tokens and documents you create, payment status (never card numbers), and technical logs.
We do not sell or share your personal information for advertising. No ad trackers.
Anything written to a blockchain, or shown on a public token page you enable, is public and permanent. We cannot erase it.
You can access, correct, delete (where possible) and export your data, and you can opt out of non-essential communications.
Questions: [PRIVACY EMAIL].

1. Who we are and what this covers

This Privacy Policy explains how [ENTITY LEGAL NAME] ("Metatron", "we", "us"), [ADDRESS], collects, uses, shares and protects personal information when you use the Metatron Launchpad website, application, public token pages, bots and emails (the "Service"). Metatron is the controller (or "business" under U.S. state law) for this information. It does not cover third-party services you use with the Service (wallets, networks, explorers, exchanges, Telegram, X, Paddle), which have their own policies.

2. Information we collect

We collect the following categories of personal information. "Source" and "Purpose" are shown for each, as U.S. state laws require.

Category	Examples	Source	Purpose
Identifiers and account data	Email address, account id, sign-in method (Google or magic link), name if provided	You; Google when you sign in with Google	Create and secure your account; communicate with you; record legal acceptances
Wallet addresses	Addresses you connect or use as deployer, beneficiary or recipient; labels you assign	You; the blockchain	Prepare transactions; show balances and holders; screen for sanctions; display on your public page when you enable it
Token and project data	Designs, names, symbols, logos, descriptions, links, distribution plans, vesting, documents, listing kits, claim lists you upload (addresses and amounts)	You; generated by the Service from your inputs	Provide the Service; build your documents and pages
On-chain records	Contract addresses, transaction hashes, balances, transfers, holders, locks, pool data	Public blockchains via RPC and explorer providers	Show the state of your token; health checks; readiness; public pages
Payment data	Paddle transaction and subscription ids, status, amounts, dates	Paddle	Grant entitlements; support; accounting. We never receive card numbers
Communications	Emails you send us, support requests, guide questions you type, Telegram channel ids you connect	You; Telegram	Respond to you; operate the guide and bots
Legal acceptance records	Versions accepted, timestamps, IP address, user agent, acknowledgments before live-network actions, arbitration opt-out	Your device; the Service	Prove and enforce our agreement; comply with law
Usage and technical data	Pages viewed, actions taken, errors, device and browser type, approximate location from IP, build version, wallet connector used, error codes	Your device; the Service	Operate, secure and improve the Service; fix failures; prevent abuse
Cookies and local storage	Session tokens, preferences (for example Guide mode), theme, wallet connection state	Your device	Keep you signed in; remember settings

We do not knowingly collect sensitive personal information (such as government identifiers, financial account numbers, precise geolocation, health, or biometric data) and we ask you not to submit it. We do not collect private keys or seed phrases, ever.

3. How we use information

We use personal information to: provide, operate and secure the Service; prepare transactions you sign; read and display blockchain data; generate documents, pages and kits you request; process payments and entitlements through Paddle; send transactional messages (acceptances, receipts, security alerts, reminders you enable, health flags you enable); provide support and the in-app guide; detect, prevent and investigate fraud, abuse, sanctions violations and security incidents; comply with law and enforce our Terms; analyze usage in aggregate to improve the Service; and, with your consent where required, send product updates you can unsubscribe from at any time.

For users in the EU/EEA, UK and similar jurisdictions, our legal bases are: performance of our contract with you; our legitimate interests (security, fraud prevention, improvement, enforcing our terms); compliance with legal obligations (sanctions, tax, requests from authorities); and consent where we ask for it (optional communications, optional integrations).

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only:

With service providers (processors) who act on our instructions under contract: Lovable Cloud (hosting, database, authentication, storage), Google (sign-in), Alchemy (blockchain RPC and event data), Etherscan, Basescan and Polygonscan (contract verification and explorer data), CoinGecko (public token data and logos), Paddle (payments, as merchant of record and independent controller for the payment itself), Coinbase and Base Account, WalletConnect and Reown (wallet connections), Telegram (bot messaging to channels you connect), an email delivery provider, and error and analytics tooling that we operate. A current list is available on request.
On public blockchains and public pages, when you sign a transaction or enable a public page: addresses, amounts, contract data and the labels and content you choose to publish become public.
With Metatron Launch, if you arrive from or connect to launch.metatron.systems: your account email and token records are exchanged between the two Metatron services to carry your design over and to show your token there.
For legal reasons: to comply with law, regulation, legal process or governmental request; to enforce our Terms; to protect the rights, property or safety of Metatron, our users or the public; and in connection with sanctions screening.
In a business transfer: if Metatron is involved in a merger, acquisition, financing or sale of assets, information may be transferred subject to this Policy.
With your direction: when you connect an integration or ask us to share.

5. Blockchain and public data

Blockchains are public, global and permanent. When you deploy a contract, transfer tokens, lock liquidity, fund a vesting wallet or claim tokens, the addresses, amounts and transaction details are recorded on a public ledger that we do not control and cannot alter or delete. Your public token page and link hub, when you enable them, are visible to anyone and may be cached, copied or indexed by third parties. Disabling a page stops us from serving it; it does not remove copies others made. Please consider this before publishing.

6. Cookies, local storage and signals

We use strictly necessary cookies and local storage for sign-in sessions, security, preferences and wallet connection state, and first-party analytics that we operate to understand usage in aggregate. We do not use third-party advertising cookies or trackers. We honor Global Privacy Control (GPC) browser signals as an opt-out of any sale or sharing, which we do not do in any case. You can clear local storage in your browser; some features will require you to sign in again.

7. Retention

We keep account and token records while your account is active and for up to [24 — COUNSEL] months afterward, unless a longer period is required by law (for example, tax and payment records for 7 years, and legal acceptance records for the life of the agreement plus applicable limitation periods). Usage logs are kept for up to 12 months. Sanctions-screening logs are kept as required by law. On-chain data is outside our control and permanent. When you delete your account, we delete or de-identify the information we hold, except what we must keep for legal, security or dispute purposes and what is public on-chain.

8. Security

We use encryption in transit (TLS) and at rest, access controls and row-level security in our database, least-privilege service keys, logging and monitoring, and periodic review. We never hold private keys, so a breach of our systems cannot expose them. No system is perfectly secure; we cannot guarantee security, and you are responsible for your device, wallet and credentials. If we learn of a breach affecting your personal information we will notify you and the relevant authorities as required by applicable law.

9. Your rights and choices

United States. Depending on your state (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Jersey and others), you may have the right to: know what personal information we collect, use and share, and access it; correct inaccurate information; delete information (subject to exceptions and the on-chain limitation above); obtain a portable copy; opt out of sales, sharing and targeted advertising (we do none) and of certain profiling; limit the use of sensitive information (we collect none); and not be discriminated against for exercising these rights. You may appeal a decision by replying to our response. California residents also have the right to know the categories of sources and third parties, which are in Sections 2 and 4. To exercise rights, email [PRIVACY EMAIL] from your account email or use the in-app request; we will verify your identity through your account. An authorized agent may act for you with written permission and verification.

European Economic Area, United Kingdom, Switzerland. You have the rights of access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your supervisory authority. Where we rely on legitimate interests you may object; where we rely on consent you may withdraw it.

Israel. You have the rights of access and correction under the Protection of Privacy Law, 5741-1981, as amended, and may contact the Privacy Protection Authority.

Everyone. You can unsubscribe from non-transactional emails via the link in each email or your settings; transactional and security messages continue while you have an account. You can disconnect wallets, Telegram channels and integrations, disable public pages, and delete your account in the Service.

10. Children

The Service is not directed to children and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 13, and if we learn that we have, we delete it. Contact us if you believe a child has provided information.

11. International transfers

We are based in Israel and our providers process data in the United States, Israel, the EU and other countries. Where required, we use appropriate safeguards for transfers (such as standard contractual clauses, the EU-Israel adequacy decision, or provider certifications). By using the Service you understand that your information may be processed in countries with different data-protection laws.

12. Do Not Track and Global Privacy Control

We honor GPC signals as described in Section 6. We do not respond to "Do Not Track" browser signals because there is no common standard, but we do not track you across other sites.

13. Changes

We may update this Policy. We will post the new version with its effective date and, for material changes, notify you by email or in the Service and ask you to re-accept. The version you accepted governs until the new effective date.

14. Contact

[ENTITY LEGAL NAME] [ADDRESS] Privacy: [PRIVACY EMAIL] [COUNSEL: EU/UK representative under Article 27, if required; Israeli database registration details, if required.]

We collect identifiers (email, account id), wallet addresses, token and project data you create, payment status from Paddle, communications, legal acceptance records, and usage and technical data, for the purposes described in our Privacy Policy. We do not sell or share personal information. Retention periods are described in the Policy. See the full Privacy Policy at [URL].