Privacy Policy

1. Introduction

SLAx ("we", "our", or "us") operates an RPC analytics platform that monitors blockchain RPC endpoint performance and provides analytics, leaderboards, and alerting services. We are the data controller for the personal information collected through our platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service. If you do not agree, do not use the service. SLAx is operated from Montreal, Quebec, Canada.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Full name
• Company or organization name (optional)
• Password (stored securely using bcrypt hashing)

Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers, CVVs, or full card details on our servers. We receive and store only a Stripe customer identifier and subscription status to manage your plan.

Webhook URLs

If you configure alert notifications, we store the Discord and/or Slack webhook URLs you provide. These URLs are used solely to deliver alerts you have configured.

Monitoring Data

Our platform collects publicly available data from RPC endpoints, including:

• Endpoint availability status (UP/DOWN)
• Response times and latency metrics
• Downtime duration and frequency
• Timestamps of monitoring events

This data is derived from publicly accessible blockchain RPC endpoints and does not contain personal information of end users.

Usage Data

We automatically collect certain information when you access our service:

• IP address
• Browser type and version
• Pages visited and session duration
• Access times and dates

Cookies and Local Storage

We use cookies and local storage to maintain your authentication session and remember your preferences. These are essential for the service to function properly. We do not use tracking cookies for advertising purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide RPC monitoring, analytics, leaderboard rankings, and alerting services
• Account Management: To manage your account, authenticate access, and provide customer support
• Payment Processing: To process subscription payments and manage your plan through Stripe
• Security: To detect and prevent fraud, abuse, and security incidents
• Communication: To send service updates, alert notifications, and support responses
• Service Improvement: To analyze usage patterns and improve our monitoring algorithms and platform

4. Lawful Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide you with the services you signed up for (account management, analytics delivery, alert notifications)
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our platform, ensuring security, and preventing fraud, where these interests are not overridden by your rights
• Legal Obligation: Processing necessary to comply with tax, accounting, or other legal requirements
• Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications. You may withdraw consent at any time

Canadian Residents (PIPEDA / Quebec Law 25)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). Under Law 25, Quebec residents have the right to access, correct, and obtain portability (in a structured, commonly used format) of personal data we hold, and to request deletion of personal data collected with consent. To exercise these rights, contact us at support@slax.sh.

5. Data Sharing

We may share your information in the following limited circumstances:

• Stripe: Payment data is shared with Stripe for subscription processing. Stripe's privacy policy governs their handling of your payment information
• Hosting Providers: Your data is stored on infrastructure provided by our hosting partners, who are contractually bound to protect your data
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users
• Aggregate Data: We may share aggregated, anonymized analytics (e.g., overall uptime statistics for blockchain networks) that cannot identify individual users

6. International Data Transfers

Your data is processed and stored in the United States. If you are accessing our service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. Where required by applicable law, we use standard contractual clauses or other approved transfer mechanisms to ensure your data receives adequate protection during international transfers.

If we become aware of a data breach that poses a risk to your rights, we will notify affected users and relevant supervisory authorities as required by applicable law.

7. Data Retention

We retain your data for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active, plus 30 days after account closure to allow for reactivation
• Monitoring Data: Retained for up to 2 years for historical analytics and trend analysis
• Payment Records: Retained for 7 years as required by tax and accounting regulations
• Server Logs: Retained for 90 days for security monitoring and debugging purposes

8. Your Rights

All Users

Regardless of your location, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Export: Request your data in a portable, machine-readable format
• Objection: Object to certain types of processing of your data

EU/EEA Residents (GDPR)

In addition to the rights above, you also have the right to:

• Restrict Processing: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Supervisory Authority: Lodge a complaint with your local data protection supervisory authority

UK Residents (UK GDPR)

UK residents have rights equivalent to those under the EU GDPR: access, rectification, erasure, restriction of processing, data portability, objection, and the right to withdraw consent. You may also lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk. Contact us at support@slax.sh to exercise your rights.

California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know: Request information about the categories and specific pieces of personal data we have collected
• Delete: Request deletion of your personal information
• Opt-Out of Sale: We do not sell your personal information. No opt-out action is required
• Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights

Brazil Residents (LGPD)

Under the Lei Geral de Proteção de Dados, you have the right to confirmation of processing, access to your data, correction, anonymization, portability, deletion, and information about shared data. You may also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados), the Brazilian data protection authority. Contact us to exercise these rights.

To exercise any of these rights, please contact us at support@slax.sh. We will respond within 30 days (or sooner where required by law).

9. Data Security

We protect your data using:

• Encryption of data in transit (TLS/HTTPS)
• Secure password hashing (bcrypt)
• Role-based access controls and authentication requirements
• Regular security assessments and monitoring

No internet transmission is 100% secure. We cannot guarantee absolute security of your data.

10. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information promptly. If you believe we may have collected data from a minor, please contact us at support@slax.sh.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email at least 30 days before the changes take effect. We will also update the "Last updated" date at the top of this page.