Privacy Policy

Information we handle#

Rallypad handles information you provide when you launch coins, connect X, submit posts and receive rewards.

• X account: account ID, username, profile-image URL, follower count and authorization information, including access and refresh tokens.
• Launches and wallets: coin details, uploaded logos and links, payout addresses, launch drafts, payment addresses, transaction signatures and payment status.
• Posts and rewards: submitted text, X post IDs, verification results, follower-count snapshots, points, round allocations, milestone evidence and payout records.
• Technical information: session identifiers, request and error information. Infrastructure providers may process IP addresses, browser information and access logs when serving requests.

We do not ask for your X password or your personal wallet’s seed phrase or private key. X authentication takes place on X; optional wallet payments are approved in your wallet.

How we use information#

We use this information to authenticate accounts, publish the posts you submit, prevent duplicate submissions and payments, calculate rewards, process launches and transfers, display coin and reward information, investigate failures, respond to requests and maintain security and accounting records. Connecting X does not authorize unrelated automatic posts.

Public information and linked identities#

Posts published to X are public under your X settings. Coin metadata, uploaded logos, token addresses, registered creator payout addresses, milestone progress and onchain transactions may be publicly visible. Blockchain records can be copied by others and generally cannot be changed or deleted.

Rallypad links your X account to your saved payout address and reward activity in its records. A payout transaction can also allow others to associate your public post with a wallet. A public wallet address is not anonymous simply because it does not contain your name.

Providers and sharing#

We share the information needed to operate the service with X for authentication, publishing and verification; Supabase for database and uploaded-file storage; Vercel for website hosting and basic website analytics, including page views; and Solana RPC providers for blockchain reads and transactions. A separate worker processes queued jobs and signs Rallypad transactions.

Your browser also contacts market-data services such as Jupiter and Trench, plus remote image hosts, when those resources are displayed. Those services receive ordinary connection information, such as your IP address, and the requested token or resource. Providers operate under their own policies and may process information in other countries.

We do not sell your personal information or use it for third-party advertising. Information may also be disclosed when legally required, to address fraud or security incidents, or to protect lawful rights. We do not send your X authorization tokens to market-data providers.

Cookies and browser storage#

Rallypad uses first-party cookies to maintain browser-bound requests and sign-in sessions. Current browser-request cookies can last up to 30 days and wallet sign-in cookies up to 12 hours, and X sign-in cookies up to 7 days. The temporary X authorization cookie lasts up to 5 minutes. Browser session storage tracks active launch orders and uncertain payments so you can resume them.

Blocking or clearing this storage can interrupt sign-in or access to an unfinished launch. Revoking authorization on X prevents future use of that grant but does not remove posts already published or delete Rallypad’s records. We do not use advertising cookies in the current application.

Retention and security#

We retain account and service records while needed to provide the service, resolve outstanding launches and rewards, prevent repeated claims, address disputes and meet applicable obligations. Different records have different retention needs; we do not currently promise an automatic deletion period for all account data. Backups and provider logs may persist beyond removal from active systems.

X authorization tokens are encrypted before database storage. Signing and decryption material is kept separately from the hosted website. We limit access to private records, but no online service can guarantee absolute security.

Your choices and requests#

You can stop using the service, disconnect your Rallypad session, and revoke Rallypad’s access in X settings. Disconnecting a session is not an account-deletion request.

To request access, correction or deletion of personal information, or to raise a privacy concern, contact @rallylaunchpad on X and ask for a private support channel. Do not post personal information publicly. We may need to verify control of the relevant account before acting. Depending on your location, you may also have rights to object, restrict processing, obtain a copy of your data or complain to a privacy regulator.

Some information must be retained for accounting, security or legal reasons. We cannot erase blockchain transactions, remove copies held independently by others, or delete an X post through a Rallypad account-data request. We will explain applicable limitations when responding.

Age and updates#

Rallypad is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate.

Changes to this policy will be published here with an updated date. Materially different uses of personal information will be communicated, and additional consent requested where required. Read the Terms of Service for the rules governing launches, posts and rewards.