Privacy

What NoFee keeps

• Your Telegram user ID, to answer you and to send you notifications.
• The public address of each wallet you create with NoFee (and its Solana address, when you use Solana), and the name you give it.
• Your safe address, when you set one: the public address of a wallet you control, where Send everything sends your funds.
• Your orders and swaps: token, amount, price, transaction hashes, fill and settlement status, and the gas you paid.
• Your transfers and withdrawals: amount, destination address and, for a withdrawal, the destination chain. A transfer on the same chain is public on the blockchain; the destination of a withdrawal to another chain is not, it is known to NoFee and to Relay.
• The deposits the bot announced to you: token, amount and, when it is known, the transaction, so they show in your history.
• Your settings (button amounts, price offsets, chart period, preferred currency), your price alerts, the launchpad tokens you follow, and the tokens you bought through the bot, so they show in your balance.
• Referrals: your referral code, who invited you and when, the rewards owed, and for each of your orders the wallet that placed it, so its fees can be credited later. To stop self-referral, a reward credit also keeps the address that first funded the invited wallet.
• The list of the token contracts each of your wallets holds, on each chain (never the amounts, which the bot reads again each time), so your balance shows without asking the node providers at every screen.
• The share card of a sale: gain in dollars, entry and exit prices, how long you held.
• The quotes you open, and the identifiers of the bot's messages in your chat, so it can update or close its screens.
• A short technical log of what the bot did (quote prepared, order signed, alert triggered), used to run the service.

How long

• Quotes, signed or not: at least 2 hours after they are prepared, then deleted when the next quote is prepared.
• Share cards: 180 days.
• The list of tokens a wallet holds: replaced at each read, and deleted after 30 days without one.
• Everything else: until you send /forget. The technical log then keeps its lines, without your identifier.
• Backups: all of this is saved every night and each backup is kept 14 days on the server. A copy of these backups is also kept on a computer of the NoFee team, also for 14 days.

What NoFee never has

• Your private key or recovery phrase. Your wallet is created and secured by Privy, which splits the key in two parts: NoFee holds none of them, and you see your key only in Privy’s own window, through Export key. The wallet page is served by NoFee, so it relies on that page not being tampered with.
• Your phone number, e-mail address or contacts. Telegram does not give them to bots.

What Telegram sends, and NoFee does not keep

With every message and each time you open the app, Telegram sends the bot your first name, and your last name, username and language when you have set them. NoFee does not store them.

Who else sees data

• Telegram, which carries the conversation.
• Cloudflare, in front of NoFee's web pages: it sees your IP address and the pages you open.
• The blockchains, where transactions are public: Robinhood Chain; Solana, for your Solana wallet; and, for a deposit, a withdrawal, or a token you buy or sell there, the other chain (Base, Arbitrum, Ethereum, Optimism, Polygon, BNB Chain, HyperEVM, Monad or Arc).
• The node providers the bot reads the chains through: dRPC and Alchemy for Robinhood Chain, dRPC for Base, Ethereum, BNB Chain, Monad, Arc and Solana, and PublicNode for Arbitrum, Optimism and Polygon. PublicNode also serves some reads of the current state of Robinhood Chain, Base, Ethereum, BNB Chain and Arc (balances, prices, deposits), with dRPC taking over when it does not answer. They receive your wallet's public address when the bot reads your balances and orders. On every chain, the list of tokens your wallet holds comes from Alchemy, or from dRPC when Alchemy does not answer, which receive your wallet's public address for it. The live price on an order page also comes through dRPC, from our server: dRPC learns which pools are watched, not who watches them, and your browser only talks to NoFee for it. To see a deposit the moment it lands, our server also keeps a live subscription at dRPC to the transfers received by the wallets saved in the bot, and sent by the wallets you added yourself: dRPC receives that list of public addresses, never your Telegram identity.
• The servers of SCOPL, the limit order technology NoFee uses: they receive your wallet's public address when an order is quoted, and while one of your orders is open, when our server asks them what happened to it.
• GeckoTerminal, part of CoinGecko, when you open an order page or a token’s chart: your browser asks it for the price chart, so it sees your IP address and the token you look at.
• DexScreener, for token prices and markets: our server asks it about the tokens you look at or hold, never with your wallet address or your Telegram identity.
• KyberSwap, when a swap is routed through its aggregator: it receives your wallet's public address and the amounts.
• Jupiter, when you buy or sell a token on Solana: it receives your Solana wallet's public address and the amounts.
• Relay, the bridge for deposits from and withdrawals to other chains, and for buying or selling a token on Base, Ethereum, BNB Chain, Monad or Arc with your USDG: it receives your wallet's public address, the destination address and, for a buy or a sale, the token and the amounts.
• Privy, which creates and secures your wallet: it receives the Telegram account you log in with and your wallet’s public address, and handles your key under its own terms.

Deleting your data

Send /forget to the bot. Your wallet addresses and their names, your safe address, settings, alerts, follows, quotes, your referral data, your share cards, the tracking of your orders and your history are erased from the bot's data at once, and the technical log keeps its lines without your identifier. Rewards already owed to the person who invited you stay due: those records keep the wallet address of each order and the address that funded it, without your Telegram ID. What was saved before that moment remains in the backups until they are deleted. Orders already placed stay on the blockchain, which nobody can edit. Your wallet itself is not deleted: it stays with Privy, and opening the wallet page selects it again.

Contact

Write to the bot, or to the team at the address shown on the NoFee channel.