Herd Labs – Privacy Policy

Acceptance and Consent to the Privacy Policy

Herd Labs, Inc., a Delaware corporation ("Herd Labs," "Company," "we," "us," or "our"), respects your privacy and is committed to safeguarding any information we collect from or about you. This privacy policy, as amended from time to time ("Privacy Policy"), outlines our practices regarding the data we collect when you use our AI-powered blockchain interface services, website, applications, APIs, and related technologies (collectively, the "Services").

Data that may be relatable to an identifiable living natural person is referred to herein as "personal information," "personal data," or "PI."

Herd Labs seeks to comply with general principles of privacy, many of which have been reduced to laws in various jurisdictions. We comply fully with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and any applicable U.S. state privacy laws.

Data Controller

For the purposes of the GDPR (General Data Protection Regulation), Herd Labs is a "data controller," meaning we are the party responsible for deciding the purposes and means of processing "personal information," as defined by the GDPR.

Personal Data Collected

While using our Services, we collect only the information necessary to provide our AI-powered blockchain interface services and maintain platform security. The Company collects minimal personal information to ensure optimal service delivery while respecting user privacy.

Important Service Limitations: The Services and personal information collected are NOT intended for use by you for:

• Health-related purposes or services
• Legal-related purposes or services
• Financial advisory or real estate-related professional services

Data You Provide

Through the use of the Services or the creation of an account, we currently collect minimal data directly from you:

• Account Information: Email address (via Privy), Farcaster social profile information (if connected), username and credentials
• Blockchain and Wallet Information: Wallet addresses (when connected via Privy), wallet connection data and transaction patterns
• Service Usage Data: Chat communications with AI agents, queries and prompts, created "Trails" and metadata, UI interactions
• Communication Information: Support requests, feedback, and survey responses

How Personal Data is Used and Shared

We do not sell data to third parties. We do not engage in data "selling" or "sharing" for marketing purposes. We use personal data for:

• Service Provision: AI-powered blockchain analysis, transaction simulation via Tenderly, security screening via Blockaid
• AI and Machine Learning: Training AI models (with personal identifiers removed), improving blockchain analysis capabilities
• Communication: Support, service updates, technical announcements
• Security and Compliance: Fraud prevention, AML/KYC compliance, sanctions screening

Service Providers and Third Parties

Currently, we work with the following third parties:

• Privy: Authentication and wallet connection services
• Google Cloud Platform (GCP): Data storage and processing in the United States
• Farcaster Network: Social profile integration (user-controlled sharing)
• Tenderly: Transaction simulation services
• Blockaid: Security screening services

Retention

We retain personal data for the minimum time necessary:

• Account Information: While active plus 30 days after deletion
• Chat Data: Retained indefinitely for AI training (de-identified)
• Trail Data: Can be archived but usage data retained for improvement
• Blockchain Data: Cannot be deleted (publicly available on networks)

Your Rights

Depending on your location, you may have rights to:

• Know what personal information we collect, use, share, or sell
• Access, delete, update, or correct your personal data
• Transfer your personal data to a third party (data portability)
• Restrict processing and object to processing
• Lodge a complaint with your local data protection authority

Important Note: Our AI-generated responses may not always be factually accurate. You should not rely solely on AI-generated blockchain analysis.

Contact us at [email protected] to exercise your rights.

Children

Herd Labs does not permit use by individuals under 18. We do not knowingly collect data from children under 13 (or 16 for EEA residents). Contact [email protected] if you believe a child has provided data to us.

Security

We implement reasonable security measures including secure authentication via Privy, limited data access, and US-based GCP hosting. However, no internet transmission is 100% secure. We do not store private keys or wallet credentials. Users maintain control over their wallet security.

Cookies and Tracking

We currently use minimal cookies:

• Privy Authentication Cookies: Essential for login and wallet connections
• Session Cookies: Required for basic service operation

We plan to integrate analytics services (like Amplitude) which will add performance and functional cookies with opt-out mechanisms.

Data Transfers

All data is processed and stored in the United States via Google Cloud Platform. While we operate globally, all data processing remains within US infrastructure.

Changes to Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, legal requirements, or business practices. Material changes will be communicated through our Services or via email.

Contact Information

For questions about this Privacy Policy, to exercise your rights, or to report concerns:

This Privacy Policy is effective as of August 6, 2025 and supersedes all previous versions.