Privacy Policy

1. Introduction

This Privacy Policy explains how Dera Labs Limited, a private limited company incorporated in England and Wales (company number 16535617), registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom (the “Company”, “we”), handles information in connection with the interface at dera.fi and related services (the “Interface”). The Dera Protocol itself is a non-custodial, decentralized set of smart contracts that operate autonomously on the Ethereum blockchain; we do not control the blockchain or the data recorded on it.

2. Our Role and Blockchain Data

Blockchain transactions are public, permanent, and pseudonymous by design. Any interaction you make with the smart contracts — including your wallet address and transaction history — is recorded on a public ledger that we do not operate and cannot alter, delete, or erase. This Policy covers only data processed through our Interface, not the public blockchain.

3. Data We Process

We deliberately minimise data. We do not collect names, identity documents (KYC), or account registrations. We may process:

• Wallet address — when you connect a wallet, to display balances and enable interactions. A wallet address may be personal data under the GDPR where it can be linked to an identifiable person.
• Technical and usage data — IP address, device and browser type, pages viewed, and timestamps, via server logs and privacy-friendly analytics, used to operate and secure the Interface.
• Communications — if you contact us, the contents of that communication.

We do not knowingly collect data from anyone under 18.

4. Legal Bases

Where the UK GDPR or EU GDPR applies, we rely on: our legitimate interests (operating, securing, and improving the Interface and preventing abuse); the performance of the terms you accept when using the Interface; and, where required, your consent (for example, for non-essential analytics).

5. Cookies and Analytics

The Interface uses only essential or functional storage and privacy-respecting analytics that do not rely on cross-site tracking cookies. Where consent is legally required for any analytics, we will request it.

6. Sharing and Processors

We do not sell personal data. We share limited technical data with infrastructure providers acting as processors, including Vercel Inc. (hosting and analytics), public RPC node providers, and DefiLlama (to read on-chain and yield data). Reading public blockchain state necessarily discloses your wallet address to the node provider serving the request.

7. International Transfers

Our providers (for example, Vercel) may process data in the United States and other countries. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the applicable Standard Contractual Clauses.

8. Retention

Server logs and analytics are retained only as long as necessary for security and operations, then deleted or aggregated. Blockchain data is outside our control and is permanent.

9. Your Rights

Subject to applicable law (including the UK GDPR and EU GDPR), you may request access, rectification, erasure, restriction, portability, and objection, and may withdraw consent where processing is based on it. Please note we often cannot identify the holder of a wallet address and cannot alter blockchain records. To exercise your rights, contact us using the details below. You may also lodge a complaint with your local supervisory authority (in Finland, the Office of the Data Protection Ombudsman / Tietosuojavaltuutettu; in the UK, the Information Commissioner’s Office).

10. Security

We apply reasonable technical and organisational measures, but no system is fully secure. Use of the Interface and the blockchain is at your own risk, as described in our Terms.

11. Changes

We may update this Policy from time to time; the “Last updated” date reflects the latest version.

12. Contact

Data controller: Dera Labs Limited, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: contact@derafoundation.com.