Privacy Policy

Dot Fun Labs Pvt. Ltd., a company registered in Singapore, operates people.fun (“people.fun”, “we”, “us”, or “our”). We are responsible for personal data we collect and decide how to use in connection with our website, waitlist, support, and platform.

This policy covers the current waitlist and, where enabled for you, account, wallet, creator analysis, and portfolio features. Describing a feature here does not mean it is available. Contact our privacy team at support@people.fun with questions or requests.

When you sign in using X, Google, or a supported Solana wallet, we and our authentication provider, Turnkey, process the information needed to identify and authenticate you. Depending on the method and information made available by the provider, this includes:

• Provider account identifiers, an email address or profile information, and the authentication method you used.
• Your connected wallet’s public address and public authentication key, signed login messages, and authentication results.
• Turnkey user and organization identifiers, session information, and account creation and sign-in records.

A provider may supply an account identifier without a readable username. We may resolve a public X identifier to its public profile information for internal signup reporting.

Joining the waitlist currently creates an authentication identity through Turnkey; it does not create an embedded portfolio wallet. Information about signups is available to us through Turnkey.

If you contact us, we receive your email address, message, attachments, and information you choose to share. Do not send seed phrases, private keys, passwords, or authentication tokens to support.

If you use portfolio features, we process associated wallet identifiers and public addresses, balances and holdings, deposits and withdrawals, transaction instructions and signatures, transaction status and history, portfolio selections, and automation settings. We also keep records of permissions granted to execute supported actions.

Wallet and account identifiers may be linked so we can provide your account, display activity, and operate authorized portfolio features. Blockchain information can identify you when combined with account information or other publicly available data.

Transactions broadcast to a public blockchain are visible to others and may remain available indefinitely. We cannot remove or alter blockchain records or control copies made by independent third parties.

To develop and operate creator analysis features, we collect public content such as X posts, replies, quoted posts, and available article text, together with author identifiers, source links, timestamps, and related metadata. This may include personal data about creators and people mentioned in their public content, whether or not they have a people.fun account.

We use automated analysis, including AI services, to interpret this content and produce signals, summaries, model allocations, and historical records. These outputs can be incomplete or incorrect. They are not verified records of a creator’s holdings, instructions, or endorsement.

Public source passages and associated context may be sent to AI providers, including OpenAI, for this analysis. Historical source records and derived outputs may remain in our systems after a source post changes or is removed. Contact us to request review or correction of information about you; requests are assessed under applicable law.

Our website and infrastructure providers process technical information such as IP addresses, request and error logs, browser and device information, pages visited, referrers, and approximate location derived from network data. We use this information to serve the site, diagnose failures, understand usage, and help prevent abuse.

We use Vercel Web Analytics for aggregate website usage statistics. Vercel describes this service as using no third-party cookies and no cross-site tracking identifiers. This does not mean that authentication or other infrastructure is free of storage or logging. See Vercel’s analytics privacy documentation.

Authentication uses browser storage and session credentials to complete sign-in and remember an active session. Sign-in providers and wallet apps may use their own storage. You can clear site data or control storage through your browser, but doing so can sign you out or interrupt sign-in. Signing out or clearing browser data does not delete your Turnkey identity or revoke every portfolio permission.

• Authenticate users, record waitlist participation, evaluate access, and administer accounts.
• Provide requested wallet and portfolio features and carry out authorized actions.
• Analyze public creator content and calculate or display signals, allocations, performance information, and activity.
• Respond to support and privacy requests and communicate relevant service, access, or security updates.
• Maintain and improve reliability, investigate abuse, enforce our terms, resolve disputes, and meet applicable legal obligations.

We collect, use, and disclose personal data with consent where required, or under another basis or exception permitted by applicable law.

Where EU or UK data protection law applies, our bases are performing our agreement with you for requested account and portfolio services; legitimate interests in security, reliability, support, and public content analysis, subject to your rights and interests; compliance with applicable legal obligations for required records and disclosures; and consent for optional processing that requires it, such as certain promotional communications.

We will seek consent for promotional communications where required. You can opt out of promotional messages through an unsubscribe option, where provided, or by contacting us. Essential account or security communications are separate from marketing.

We share information as needed for the purposes above with:

• Service providers: authentication and wallet infrastructure such as Turnkey; hosting and analytics such as Vercel; database and infrastructure providers; and support, security, and AI analysis providers. Providers receive information relevant to the service they perform.
• Authentication and transaction services: X, Google, your wallet provider, blockchain networks, RPC services, and swap routing or liquidity services when you use the relevant feature. Public transactions and associated addresses are not confidential.
• Other users and the public: creator analysis and public market or blockchain information displayed by the platform. This does not make your email address or login credentials public.
• Professional advisers, authorities, and relevant parties: when reasonably necessary to comply with law, respond to lawful requests, protect rights and safety, or investigate fraud or abuse.
• Business transaction parties: where necessary in connection with a proposed or completed financing, merger, acquisition, reorganization, or transfer of the business, subject to applicable law.

We do not sell personal data or share it for cross-context behavioral advertising. Independent services may also process information under their own policies. When Turnkey processes information on our behalf as embedded infrastructure, it acts on our instructions; Turnkey’s Privacy Policy describes its own processing activities. Provider policies do not replace our responsibilities for our own processing.

Our company is registered in Singapore, and our providers may process information in other countries whose privacy laws differ from those where you live. Transfers are subject to applicable data protection requirements, including Singapore’s requirements for protection comparable to the Personal Data Protection Act. Where additional transfer safeguards are required by a law that applies to you, we must use an appropriate lawful transfer mechanism.

Contact us for information about the arrangements applicable to your data.

We retain personal data for as long as reasonably needed for the purposes described in this policy, including operating accounts, maintaining transaction and analysis records, resolving disputes, preventing abuse, and satisfying legal or business recordkeeping requirements. The period depends on the type of record and why it is held; session expiry alone does not delete an account or its records.

Our retention obligations require us to stop retaining identifiable personal data when it no longer serves its purpose and there is no other legal or business need to retain it. We assess deletion and anonymization requests against these requirements. Public blockchain records are outside our deletion control.

We use reasonable technical and organizational measures to protect information. No service, transmission method, or storage system can guarantee absolute security. Protect your sign-in accounts, devices, and wallet credentials, and contact us if you suspect unauthorized access.

Depending on the law that applies, you may request access to personal data we hold, information about its use or disclosure, correction of inaccuracies, deletion, restriction of processing, portability, or objection to certain uses. These rights are subject to legal conditions and exceptions; not every right applies in every country.

You may withdraw consent for processing that relies on it by giving us reasonable notice. We will explain relevant consequences, which may include being unable to continue providing a feature. We will stop the collection, use, or disclosure covered by your withdrawal, including instructing relevant processors, unless continued processing is permitted or required by law. Withdrawal does not affect processing already lawfully carried out.

Send requests to support@people.fun. We may need to verify your identity and clarify the request without asking for your private keys or seed phrase. We will respond within the timeframe required by applicable law and explain any lawful limitation or permitted fee before charging it.

You may raise a concern with Singapore’s Personal Data Protection Commission or the data protection authority where you live, as applicable.

people.fun is intended for adults aged 18 or older and is not directed to children. If you believe a child has provided personal data to us, contact support@people.fun so we can investigate and take appropriate action.

We may update this policy as the service and legal requirements change. The date above identifies the latest version. We will provide additional notice of material changes, and seek consent when required, before applying a new use of personal data.

Privacy contact: Dot Fun Labs Pvt. Ltd., Singapore. Email: support@people.fun.