Privacy Policy

1Who we are and what this covers

This policy explains how Invictus (“Invictus”, “we”, “us”) handles information when you visit this website, use the Invictus liquidity terminal, or contact us. Together these are the “Service”.

It does not cover the blockchains, protocols, wallets or other third-party services you reach through Invictus. Each has its own terms and privacy practices.

2Information we collect

Information you give us

• Wallet details. The public address of the wallet you connect, and the signatures you approve to sign in or authorise transactions.
• Preferences. Watchlists, alert rules, display settings and the strategies you configure.
• Messages. Anything you send us through support, Discord or social channels.

Invictus wallets

When you deploy liquidity, Invictus creates dedicated wallets linked to your connected wallet. We keep a record of those wallet addresses, the link to your wallet, and the positions and transactions they hold, so we can operate them on your instructions and show them in your portfolio.

Information collected automatically

• Device and usage data. Browser type, device, approximate location derived from IP address, pages viewed, features used and errors encountered.
• Local storage. Small values saved in your browser, such as your session and interface preferences. See Cookies and local storage.

Public blockchain data

Balances, transactions and liquidity positions on supported networks are public. We read and index this data to power pool analytics and to display positions linked to your wallets.

We never ask for your seed phrase or the private keys of the wallet you connect. Anyone who does is not Invictus.

3How we use information

• To provide the Service: show pools and analytics, prepare transactions, and deploy, manage and withdraw positions you authorise.
• To send the alerts and notifications you set up, such as range alerts.
• To keep the Service secure: detect abuse, fraud and attacks, and protect your wallets and ours.
• To understand how the Service is used and improve it, mostly with aggregated data.
• To meet legal obligations, including sanctions screening and responding to lawful requests.
• To reply when you contact us.

4Legal bases

Where data protection laws such as the GDPR apply, we rely on these legal bases:

• Contract: to provide the Service you asked for.
• Legitimate interests: to secure and improve the Service, as long as those interests are not overridden by your rights.
• Consent: for optional analytics or communications, which you can withdraw at any time.
• Legal obligation: where the law requires us to process or keep information.

5When we share information

We do not sell your personal information. We share it only in these cases:

• Service providers that host our infrastructure, run blockchain nodes and RPC endpoints, deliver notifications, or help us measure usage. They act on our instructions and must protect the data.
• Blockchains and protocols. Transactions you authorise are broadcast to public networks and executed by third-party protocols such as Uniswap, Meteora or Raydium. On-chain data is public and permanent.
• Legal reasons. When required by law, or to protect the rights, safety and property of our users, Invictus or others.
• Business changes. If Invictus is involved in a merger, acquisition or sale of assets, information may transfer as part of that deal under this policy.

6Cookies and local storage

We use browser storage that is essential for the Service to work, such as keeping you signed in and remembering your settings. If we use optional analytics cookies, we will ask first where the law requires it.

You can clear or block storage in your browser settings. Some features may stop working if you do.

7How long we keep it

We keep personal information for as long as you use the Service and for a reasonable period afterwards to meet legal, accounting and security needs, then delete or anonymise it. Records of Invictus wallets and their transactions are kept for as long as needed to account for funds. Data already recorded on a public blockchain cannot be deleted by anyone.

8Security

We protect information with technical and organisational measures that include encryption in transit, restricted access and monitoring. No system is perfectly secure, so please keep your own wallet, devices and accounts secure too, and tell us straight away if you suspect unauthorised activity.

9Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can also complain to your local data protection authority.

To make a request, contact us using the details below. We may need to verify that you control the wallet in question, usually by asking you to sign a message.

10International transfers

Our team and providers may operate in several countries, so your information may be processed outside the country where you live. When it is, we use safeguards such as standard contractual clauses where the law requires them.

11Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from them.

12Changes to this policy

We may update this policy as the Service changes. We will change the date at the top and, for significant changes, give notice on the website or in the app before they take effect.