Privacy Policy

This Privacy Policy applies to Elyra (“Elyra”, “we”, “us”, “our”) and to every product that links to it, together the “Services”:

• the website at getelyra.xyz;
• the Elyra application at try.getelyra.xyz, including the version published on the Solana dApp Store and any mobile or desktop build;
• the Elyra Telegram companion, if you choose to connect it;
• the documentation at docs.getelyra.xyz.

For the purposes of data protection law, Elyra is the controller of the personal data described here. Where a third-party service (for example a wallet, exchange or protocol) collects data from you directly, that service’s own privacy policy applies to that collection.

Please read this policy together with our Terms of Service.

Information you give us

• Account and sign-in details. When you sign in we receive your email address, phone number, or the basic Google profile (name, email address and profile picture) you authorise, depending on the method you choose, together with a unique account identifier issued by our authentication provider.
• Prompts and conversations. The instructions, questions and messages you send to the Elyra assistant, and the responses, research reports, strategy previews and decision traces it generates for you.
• Preferences and configuration. Watchlists, price alerts, take-profit and stop-loss orders, risk limits, exposure settings, notification preferences and other settings you save.
• Support and feedback. Anything you send us by email, in product feedback, in testing programs or on social channels, including your name and contact details.

Wallet and on-chain information

• Public wallet addresses of the embedded wallet created for you and of any external wallet you connect (for example through Phantom, Solflare or the Solana Mobile Wallet Adapter on a Seeker or Saga device).
• Balances, positions and transaction history linked to those addresses, read from public blockchains and from the trading venues and protocols you use through Elyra, so that we can show your portfolio, preview trades, enforce your risk limits and report profit and loss.
• Transactions you request through Elyra, including the asset, amount, route, venue, price impact, fees and the result.

We never collect, request or store your private keys or seed phrase. Nobody from Elyra will ever ask for them. If someone does, it is not us. Please report it to ayushkmrjha@gmail.com.

Telegram companion

If you link Telegram, we receive your Telegram user ID, username, display name and chat ID, and the messages and approvals you send to the Elyra bot. We use them only to deliver alerts and to continue your Elyra session in Telegram. You can unlink Telegram at any time. Messages you send through Telegram are also handled by Telegram under its own privacy policy.

Information collected automatically

• Device and log data: IP address, browser and app version, operating system, device type, language, referring page, timestamps, and the pages, features and errors you encounter.
• Usage data: how often you use features, prompt counts against plan limits, and performance and crash diagnostics.
• Approximate location derived from your IP address. We use it for security, fraud prevention and to apply jurisdictional restrictions. We do not collect precise GPS location.

Information we do not collect

We do not knowingly collect government identifiers, biometric data, health information or other special categories of personal data. Do not include them in prompts.

We use personal data only for the following purposes:

• To provide the Services: authenticating you, creating and connecting wallets, running research and analysis, generating previews, routing transactions you confirm, executing autonomous actions you have enabled within your limits, and showing your portfolio and history.
• To keep you informed: sending alerts, take-profit and stop-loss notifications, circuit-breaker pauses, daily briefings, and service, security and policy notices.
• To keep Elyra safe: preventing fraud, abuse and unauthorised access, enforcing usage limits, screening against sanctions lists and blocking restricted jurisdictions.
• To improve Elyra: debugging, measuring reliability and latency, evaluating agent quality, and developing new features. We use aggregated or de-identified data wherever we can.
• To support you: answering requests and investigating issues you report.
• To meet legal obligations: complying with applicable law, lawful requests and our Terms of Service, and establishing or defending legal claims.

We do not use your personal data for third-party advertising, and we do not sell it.

Elyra is built on a set of specialised AI agents. When you send a prompt, the relevant parts of it, together with the context needed to answer it (such as public market data, your public wallet positions and your risk settings), are processed by large language model providers we use to generate responses, research and strategy previews.

• We send model providers only what a task needs. We do not send your email address, phone number or authentication credentials as part of a prompt.
• Model providers process this content on our behalf to return a result, under their own terms and privacy policies.
• Elyra does not use AI to make decisions about you that produce legal or similarly significant effects. AI output is analysis to help you decide. Trades beyond the narrow autonomous scope described in our Terms require your confirmation.
• We may review samples of prompts and outputs to fix errors, prevent abuse and improve agent quality. Where we use conversations to evaluate or improve our own systems, we remove direct identifiers first.

Avoid putting sensitive personal information in prompts. Elyra does not need it to work.

Where laws such as the EU or UK GDPR or India’s Digital Personal Data Protection Act, 2023 apply, we rely on:

• Contract: to provide the Services you request under our Terms;
• Consent: for optional features such as connecting Telegram or enabling autonomous execution, and where the law requires consent. You can withdraw consent at any time without affecting processing that has already happened;
• Legitimate interests: to secure, maintain and improve the Services and prevent fraud and abuse, balanced against your rights;
• Legal obligation: to comply with sanctions, tax, record-keeping and other legal requirements.

We share personal data only as described below, and only as far as each purpose needs:

• Authentication and wallet infrastructure: Privy processes your sign-in details and secures the private keys of embedded wallets. Elyra never has access to those keys.
• AI model providers that process prompts and context as described in How AI processes your data.
• Trading venues, protocols and routing services such as Jupiter, Hyperliquid, Kamino, Meteora, Sanctum, Polymarket, DFlow and bridge providers. When you place a trade, deposit, bridge or take a position, your wallet address and transaction details go to the relevant venue and blockchain so the action can be carried out.
• Market and blockchain data providers such as RPC and indexing services (for example Helius) and price, derivatives, news and analytics sources. Where we query them about your portfolio, we send public wallet addresses, not your identity.
• Messaging: Telegram, if you link it, and email or SMS providers used to deliver sign-in codes and notifications.
• Hosting and infrastructure: cloud hosting, databases, content delivery (including Vercel and Cloudinary for this website), logging and error monitoring.
• App distribution: the Solana dApp Store and its operators receive information under their own terms when you download or update the app. We do not receive your store account details from them.
• Legal and safety: courts, regulators, law enforcement or other parties where we believe in good faith that disclosure is required by law or needed to protect the rights, property or safety of Elyra, our users or others.
• Business transfers: a buyer, investor or successor in a merger, acquisition, financing or sale of assets, subject to this policy.
• With your direction: anyone else you ask us to share with.

Our service providers may use personal data only to provide services to us, under confidentiality and data protection obligations.

Solana, Hyperliquid, Ethereum and the other networks Elyra interacts with are public, permanent and decentralised. When a transaction is submitted, your wallet address, the amounts, the assets and the timing become public. Anyone can read them and link them to other activity, and they cannot be altered or deleted by Elyra or anyone else.

Your deletion and correction rights apply to the data Elyra holds. They cannot reach data recorded on a blockchain.

The marketing website at getelyra.xyz uses no advertising or analytics cookies. Its fonts are served from our own domain. The background video in the hero section is delivered by Cloudinary, which receives your IP address and browser details to serve it.

The Elyra application uses strictly necessary cookies and local storage to keep you signed in, remember your wallet connection and settings, and protect your session. Our authentication provider sets its own cookies for the same purpose. We may use privacy-respecting, first-party product analytics to understand feature usage. We do not use third-party advertising trackers.

You can clear or block cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in from working.

We keep personal data only as long as we need it:

• Account data, settings and conversation history: for as long as your account is active. Once you delete your account, we delete it within 30 days.
• Transaction and execution records: for as long as your account is active, and afterwards for as long as the law requires (for example for tax, audit or sanctions purposes).
• Server and security logs: typically up to 90 days, or longer when we need them to investigate an incident.
• Support correspondence: up to two years after the matter is closed.

Backups are overwritten on a rolling basis. Aggregated or de-identified data that can no longer identify you may be kept longer.

We protect data with encryption in transit (TLS), access controls that limit who can reach production systems, secrets management, and monitoring. Embedded-wallet keys are protected by our wallet infrastructure provider in hardware-backed custody, and Elyra’s servers never handle them.

No system is perfectly secure. Protect your sign-in methods, keep your devices and wallet apps updated, and check every transaction preview before you confirm it. If we learn of a breach that affects your personal data, we will notify you and the relevant authorities as the law requires.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate or incomplete data;
• delete your data and your account;
• receive your data in a portable format;
• object to or restrict certain processing;
• withdraw consent where we rely on it;
• nominate someone to exercise your rights if you die or become incapacitated (under India’s DPDP Act);
• complain to your local data protection authority or, in India, the Data Protection Board of India.

To exercise any of these rights, email ayushkmrjha@gmail.com from the address linked to your account, or tell us the wallet address or sign-in method you use. We may need to verify your identity, for example by asking you to sign a message with your wallet. We respond within 30 days and do not charge for reasonable requests.

Everyday controls

• Disconnect external wallets from the wallet menu at any time.
• Unlink Telegram and turn off notifications in settings.
• Turn off autonomous execution, take-profit and stop-loss orders and watches whenever you choose.
• Export your embedded wallet’s private key through the wallet menu where our wallet provider supports it, so that you keep control of your assets independently of Elyra.

California residents

We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we do not use sensitive personal information to infer characteristics about you. You have the right to know, delete and correct personal information and to be free from discrimination for exercising those rights.

Elyra is operated from India, and our service providers are located around the world, including in the United States and the European Union. Your data may be processed outside your country. Where the law requires it, we use appropriate safeguards for such transfers, such as standard contractual clauses, and we comply with any restrictions the Government of India places on transfers.

Elyra is not intended for anyone under 18, or under the age of majority where they live, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact ayushkmrjha@gmail.com and we will delete it.

Elyra links to and integrates with services we do not control, including wallets, exchanges, protocols, block explorers, X, Medium, Telegram and Google Docs. Their own privacy practices apply when you use them, and we are not responsible for them. Review their policies before sharing information with them.

We may update this policy as Elyra evolves or as the law changes. We will post the new version here and update the date at the top. If a change materially affects how we use your personal data, we will notify you in the app or by email before it takes effect. Continuing to use Elyra after the effective date means the updated policy applies.

For questions, requests or complaints about this policy or your personal data, including grievances under India’s Digital Personal Data Protection Act, 2023, contact us at:

Elyra: Privacy & Grievances
Email: ayushkmrjha@gmail.com
Web: getelyra.xyz/privacy