Privacy policy

CoinGraph is operated by BlockEXC Pte. Ltd., a company incorporated in Singapore (UEN 202401307Z).

Last updated 19 October 2026.

Draft. This document has not yet been reviewed by a lawyer. It describes how the service works today; the wording may change after review.

1. Who we are

BlockEXC Pte. Ltd. (68 Circular Road, #02-01, Singapore 049422) operates CoinGraph and is the data controller for the personal data described here. This policy is written to meet Singapore’s Personal Data Protection Act and, for visitors in the EEA and UK, the GDPR.

2. What we collect

• Request logs. IP address, user agent, the endpoint called and the time, used for rate limiting, abuse prevention and service health. Kept for up to 90 days.
• Request content. The token ids, amounts, addresses and questions you send. These become part of a stored, publicly verifiable proof (see section 4), so do not include personal information in a request.
• Payment records. When an agent pays with x402 or Masumi, the paying address, transaction id, amount and time, as recorded on the public blockchain. Kept as long as we need payment records.
• Monitors and webhooks. The tokens, conditions and endpoint URL you register for alerts, and a delivery log, kept while the monitor exists.
• Design-partner keys. A hash of each key, its label and when it was last used. The key itself is shown once and not stored.
• Correspondence. Your email address and message when you write to us.

CoinGraph has no user accounts today and sets no advertising or tracking cookies. The documentation remembers a light/dark preference in your browser’s local storage only.

3. Why, and on what basis

We process this data to provide the service you request (contract), to keep it secure and within its limits and to improve it (legitimate interests), and to meet legal obligations such as payment record-keeping.

4. Public proofs

Every evaluation, brief, answer and agent run is stored exactly as issued and can be viewed by anyone holding its id at /proof/{id}. A proof is a record of what CoinGraph said and when; it does not carry your IP address or identity, but it does carry the request content. If a proof contains personal data about you that should not be public, contact us and we will remove it from public view; the fingerprint recorded with partners (for example a Chainlink attestation) cannot be altered.

5. Who else receives data

• Hosting and storage: Railway and Supabase, which run our servers and database.
• Data providers: the token id or blockchain address you ask about is sent to providers such as CoinGecko, exchanges, NOWNodes, GoPlus and DefiLlama to fetch the data. Your IP address is not.
• Anthropic: the evidence CoinGraph gathers, and the question you asked, are sent to Claude to write a brief or answer.
• Payment networks: x402 payments settle on Cardano; Masumi and Sokosumi process agent jobs under their own policies.
• Verification partners: the fingerprint of each proof, not its content, is attested through Chainlink.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

Our providers run in several regions, including Asia, the United States and Europe. Where personal data leaves Singapore or the EEA, we rely on the provider’s standard contractual terms.

7. Your rights

You may ask what personal data we hold about you, ask for it to be corrected or deleted, object to processing based on legitimate interests, or withdraw consent where consent is the basis. Write to ajay@coingraph.ai; we answer within 30 days. You may also complain to the Personal Data Protection Commission of Singapore or your local authority.

8. Retention and security

Request logs and raw provider responses are kept for up to 90 days; proofs are kept indefinitely because their purpose is later verification; payment records are kept as long as the law requires. Data is encrypted in transit and at rest with our providers, and access is limited to what operating the service needs.

9. Children

CoinGraph is not directed at anyone under 18, and we do not knowingly collect their data.

10. Changes

We will update this policy when the service changes, for example when accounts launch, and change the date above. Questions: ajay@coingraph.ai.