1. Scope and operator
This Privacy Policy applies to services operated by PT WIND KRIPTOGRAFI TEKNOLOGI under the Wind Crypto brand, including windcrypto.com, Wisp Wallet, Wind Explorer, WindStack SDK, Wind Hyperion, and related public APIs and support channels (collectively, the “Services”).
PT WIND KRIPTOGRAFI TEKNOLOGI is the operator responsible for the processing described in this policy. This policy does not control independent blockchain networks, dApps, websites, RPC providers, app stores, device manufacturers, or other third parties.
2. Self-custody wallet data
Wisp Wallet is designed to let users control their own wallet credentials. Wallet passwords, private keys, and recovery material are intended to remain on the user’s device in protected local storage and are not required to be transmitted to Wind Crypto servers for normal wallet use.
- Wind Crypto support will never ask for a recovery phrase or private key.
- Device biometric templates remain managed by the device operating system. Wisp receives only the result of a device authentication request, not the underlying fingerprint or face template.
- If a user loses access to self-custody credentials, Wind Crypto may be unable to recover the wallet or restore access.
3. Information we may process
Information you provide
We may process information you send through support, security, or developer channels, such as your email address, message content, screenshots, device information, transaction identifiers, public wallet addresses, and technical details you choose to provide.
Public blockchain information
Blockchain networks are public by design. Account names, public addresses, balances, token holdings, transaction data, smart-contract actions, and related metadata may be requested, indexed, displayed, or cached to provide wallet, explorer, API, and developer functionality.
Network and technical information
When you use Wind websites, APIs, or infrastructure, servers and security systems may process ordinary request data such as IP address, date and time, requested endpoint, response status, user agent, device or browser characteristics, and diagnostic or abuse-prevention signals.
Local application information
Wisp may store settings, selected networks, public account identifiers, address-book entries, connection permissions, cached token metadata, encrypted wallet vaults, backup state, and other application data locally on the device. Clearing app data, uninstalling Wisp, losing the device, or losing recovery material can permanently remove access to this local data and its wallets.
VEX Native account creation
If you request the optional server-funded VEX Native account creation feature, the Wisp API processes the requested 12-character account name, your public key, an idempotency request identifier, and ordinary request metadata such as IP address. The service uses the IP address for a daily rate limit. It does not require or accept your private key for account creation.
Diagnostics
The current Wisp source does not include a third-party crash or product-analytics SDK. Device logs may still be created by the app or operating system, and Wind server logs may contain request, response, error, timing, rate-limit, and security information. Information you deliberately attach to a support report is also processed to investigate that report.
4. Device permissions
Depending on the feature you use, Wisp may request:
- Camera access to scan QR codes. Camera frames are processed for the requested scan and are not intended to be uploaded to Wind Crypto merely because the scanner is opened.
- Biometric or device authentication to protect local authorization and credential access through operating-system security APIs.
- Network access to communicate with supported blockchains, APIs, token lists, price sources, and websites or dApps selected by the user.
You can manage permissions through your device settings.
5. Third-party services and dApps
The Services may connect to blockchain nodes, RPC endpoints, indexed data services, token metadata sources, market or exchange-rate sources (including configured Alchemy, TronGrid, CoinGecko, and market providers), GitHub-hosted resources, app stores, and websites or dApps selected by the user. Those services may receive public addresses, asset identifiers, network identifiers, IP addresses, and requests necessary to respond to your device.
The Wisp dApp browser can display third-party content. A third-party dApp may request connection information or a transaction authorization. Its privacy practices are controlled by that dApp, not by this policy. Review the destination and request details before connecting or signing.
6. How we use information
We may use information to:
- provide, maintain, secure, and improve the Services;
- display public blockchain data and respond to API requests;
- diagnose errors, performance issues, and service availability;
- respond to support, developer, legal, and security inquiries;
- prevent fraud, abuse, attacks, or unauthorized use;
- comply with applicable law and enforce our Terms of Use.
We do not use wallet recovery phrases, private keys, or biometric templates for advertising. Wind Crypto does not operate an advertising network through Wisp.
7. Retention and security
Retention depends on the type of information and why it is processed. Public blockchain records may remain permanently available on the relevant network. Server and security logs may be retained for a limited operational, security, legal, or abuse-prevention period. Support records may be retained while needed to resolve the request and meet legitimate business or legal requirements.
We use reasonable technical and organizational safeguards, but no software, device, network, or storage system is completely secure. Users remain responsible for device security, wallet backups, and protecting self-custody credentials.
8. Your choices and rights
Depending on applicable law, you may request access to, correction of, or deletion of personal information held by Wind Crypto, or object to certain processing. We may need to verify the request and may retain information where required or permitted by law.
Wind Crypto cannot alter or erase data recorded on a public blockchain, and generally cannot control data held independently by third-party dApps or infrastructure providers.
9. Children
The Services are not directed to children who are not legally able to use self-custody digital-asset software in their jurisdiction. We do not knowingly seek personal information from children through the Services.
10. International processing
Blockchain networks and internet infrastructure are distributed. Your requests and public blockchain data may be processed in countries other than your own, subject to the practices of the network or service used.
11. Changes to this policy
We may update this policy to reflect product, legal, security, or operational changes. The current version will be posted on this page with an updated date. Material changes may also be communicated through the relevant product or website where appropriate.
12. Contact
Privacy questions or requests can be sent to [email protected]. Security-sensitive reports should be sent to [email protected].
Operator: PT WIND KRIPTOGRAFI TEKNOLOGI, Indonesia.