Privacy Policy

1. About this policy

This policy explains what personal information Callboard (getcallboard.app) keeps, why, who we share it with, and your choices. Callboard is run by Callboardapp Pty Ltd (ACN 702 966 676, ABN 50 702 966 676) from Perth, Western Australia. "We" and "us" mean Callboardapp Pty Ltd. You can contact us at support@getcallboard.app.

We aim to follow the Australian Privacy Principles. This policy works together with our Terms and Conditions.

2. What we keep

Your account: your username, profile picture, banner, bio, pinned post, the X handle you add, and when you joined. You sign in with email or Google through Privy (or with Face ID or another passkey on your device). Privy keeps your email address. We read it when you sign in, but we do not store it in our own database (unless you turn on two-step sign-in, below).

Your wallets: Privy creates your Solana wallet and your 0x wallet (used on Robinhood Chain, Base, BNB Chain and Ethereum). We keep their addresses. We never see or store your private keys or recovery phrases.

Your X account, if you link it: your X handle and when you verified it. To check it's yours, we read the verification post you make on X. We don't keep the post itself.

What you post and send: callouts, replies, chat messages, direct messages, group chats, private notes, pictures you upload, GIFs you choose, likes, reposts, reactions and follows.

Your settings: watchlist, price alerts, notification settings, mutes, blocks and hidden coins. If you turn on alerts, we keep the address your browser gives us for sending them.

Trades and payments made in Callboard: buys, sells, fees, moves between your wallets, sends to other members, boosts and coin launches, including trades that were prepared but not sent (for example when you touch the slider and then stop). Each record has the wallet, coin, amounts, the transaction's ID on its blockchain and the time.

Other records: which version of the terms you accepted and when, reports you make, reports about you, and moderation actions.

Support conversations: what you write to us in the Help chat or by email (and the email address you write from), our replies, and the ticket number. Anything in your message that looks like a recovery phrase, private key or password is hidden before it is saved.

Technical details: your IP address, which our own systems use for a short time to stop abuse (see section 7). We use Vercel Analytics to count page views. It does not use cookies or follow you around other websites. If a page breaks in your browser, or a buy, sell or sign-in fails, we keep a short error report (the error, the page, your device and browser type, and your username) for up to 14 days so we can fix it. A count of each kind of error, without your username, is kept for up to 30 days. Wallet and coin addresses are hidden in these reports.

Your age: when you join, we ask your date of birth only to check you are 18 or older. We keep that you confirmed you are 18 or older, and when, but not the date itself. If the date given when joining is under 18, no account is made. If an existing account gives a date under 18, or is found to belong to someone under 18, it is limited (it can still sell, send and withdraw) and we keep a scrambled note of that login, wallet and device for a year.

The launch list, if you join it on getcallboard.app: the email address you give, when you joined, and that you joined on our website. If you unsubscribe, we keep the address on a separate do-not-email list so we don't email it again.

Two-step sign-in, if you turn it on: the email address you give us for your sign-in codes, which we keep and use only to send those codes. The codes themselves are kept only in scrambled form and expire after 10 minutes. The emails are sent through Resend. (Accounts that turned on the earlier authenticator-app version: the key your app uses, and your backup codes, kept only in scrambled form.)

From the blockchain: your wallet's public balances and trades. We use them to show your holdings, your profit and loss, and the leaderboard.

We do not collect ID documents, bank or card details (MoonPay handles card payments), or your precise location.

3. Why we use it

To run Callboard: show your profile and posts, deliver your messages and alerts, and prepare the trades you ask for.

To work out and check fees, and to keep records of trades, payments and launches.

To keep Callboard safe: stop spam, scams and abuse, review reports, and enforce the terms.

To follow the law, and to answer lawful requests from police, courts and regulators.

To understand how Callboard is used, from page-view counts, so we can improve it.

To email you about Callboard's launch, and send the odd update, if you join the launch list. Each of these emails has a one-click unsubscribe link.

We do not sell your personal information, and we do not use it for advertising. The launch list emails are the only marketing emails we send, and only to people who joined the list.

4. What other people can see

Your username, profile, callouts, replies, public chat messages, follows and badges can be seen by other members.

Your profile also shows other members your balance and its chart, your profit and loss, your holdings and a list of your recent buys and sells with their profit or loss. Other members see these amounts rounded (for example $1.2K rather than $1,234.56) and trade times to the minute; only you see them exactly. These are worked out from your Callboard wallets' whole public history, so they include trades you made outside Callboard. Coin pages list the members who hold that coin, with how much it's worth. Your buys and sells also appear in the Trades feed on Home: to everyone on Callboard under All, and to the people who follow you under Following. People who follow you may get an alert when you buy. Your profit and loss also appears on callouts, the leaderboard and any share card you create (a share card's link works until you turn it off). Everywhere other people see your amounts (coin pages, callouts and replies, Trades, alerts, the leaderboard and the pictures for your calls and your week) they are rounded the same way. A share card you create yourself shows your exact figures, because you chose to share it.

We don't show your wallet address to other members (only you see your own transaction links). But because blockchain data is public, someone could use the details above to work out which wallet is yours.

While you're using Callboard, members you're connected with (people you have a conversation with, who follow you, or who share a group chat with you) can see that you're active now (a green dot on your profile picture in Messages and group chats). You can turn this off with "Show when I'm active" in Settings.

Direct messages can be seen only by you and the other person, and group chat messages only by the people in that group (including people added later, who can see its earlier messages). People in a conversation also see when the others have read it ("Seen"), when they're typing, and their reactions. They are not end-to-end encrypted, so we can access them if we need to, for example to deal with abuse or answer a legal request.

Each coin also has a holders chat that only people holding at least $1 of the coin can join. To let you in, and to take you out when you sell, we check how much of that coin your Callboard wallet holds (a public record on its blockchain). The other people in it can see your username and what you write, not your balance.

Voice calls (between people who follow each other) and live rooms: your voice goes through Cloudflare to the other people in the call or room. We never record calls or rooms, and they end after 24 hours at most. We keep who called whom, when, and how long the call lasted (shown in your chat), and who is in a live room while it's running (anyone in the room can see the speakers and listeners). Using them needs your permission for the microphone, which you can take back in your browser settings.

Your wallet addresses and all of their transactions are public on their blockchains (Solana, and Robinhood Chain, Base, BNB Chain and Ethereum for your 0x wallet). Anyone can see them there, and they cannot be deleted, by us or anyone else.

5. Who we share it with

We use these services to run Callboard. Each gets only what it needs:

Privy: sign-in and your wallet (your email and wallet). Vercel: hosting, page-view counts and picture storage. Upstash: our database. Resend: sends two-step sign-in codes (your email address, if you turn it on), launch list emails (your email address, if you join the list) and our support emails, and receives emails sent to support@getcallboard.app. Anthropic: the AI assistant that answers support messages first (your messages on the ticket and, in the Help chat, the details of your own account and trades it looks up to answer you; Anthropic doesn't use them to train its models). Cloudflare: carries the audio of voice calls and live rooms (your voice and IP address, not recorded). Helius and Jito: sending your signed transactions to Solana and reading blockchain data. Jupiter: prices and trade routes (your wallet address and trade amounts). KyberSwap: prices and trade routes on Robinhood Chain, Base, BNB Chain and Ethereum (your 0x wallet address and trade amounts). Relay: moving money between your Solana wallet and your 0x wallet, including paying for buys there from your cash and sending sales back to it (both wallet addresses and the amounts). Meteora: coin launches and launched coins' trades on Solana (your wallet address and the amounts). four.meme: trades of coins still on its launch curve on BNB Chain (your 0x wallet address and the amounts). Public network services of those blockchains (such as their official RPC endpoints and PublicNode): reading balances, sending your signed transactions, and testing whether coins can be sold. These tests are simulations (nothing is sent) that use public wallet addresses holding the coin, which can include your 0x wallet. GoPlus Security and Blockscout: coin safety checks (no personal information). Binance, four.meme, and the Uniswap and PancakeSwap token lists: coin pictures, names and verified lists (no personal information). GeckoTerminal, DexScreener and CoinGecko: market data. Your browser may load some of this data straight from GeckoTerminal and Jupiter, and coin pictures from public image services (such as IPFS gateways), so they see your IP address.

X: when you link your X account, we read your verification post from X. GIPHY: when you search for a GIF, your browser sends your search straight to GIPHY, so GIPHY sees your search and IP address. Web push services (Apple, Google or Mozilla): alerts you turn on. MoonPay: only if you buy SOL with a card. MoonPay collects its own information under its own privacy policy. WalletConnect (through Privy): your browser may connect to it while Privy loads, so it sees your IP address.

We may also share information when the law requires it, to protect people from harm or fraud, or with a buyer if Callboard is ever sold. A buyer would have to follow this policy.

6. Information sent overseas

Most of the services above are based in, or store data in, the United States. Callboard's servers run in the United States and in Sydney, Australia. A provider may also use other countries under its own policy. We choose established providers that commit to protecting personal information, and we send them only what they need.

7. How long we keep it

Callouts and chat messages are removed automatically after about 90 days, and replies after about 180 days. Holders chats keep their latest 500 messages and are removed about 180 days after their last message. Direct messages and group chat messages (the latest 500 in each conversation or group), your profile and your settings stay until you change them or delete your account. When you delete your account you leave your groups and the messages you wrote in them are removed. Pictures in a post or reply you delete, and a banner or group picture you replace or remove, are deleted within about a day. Pictures in a post or reply removed by our moderators are kept for 30 days (so we can look into reports), then deleted.

In our own database, IP addresses are kept only in short-lived counters, for between 1 and 60 minutes, and are not saved with your account. Security events (such as failed sign-ins and blocked transactions) are kept in a security log for up to 30 days with a scrambled code made from the IP address, which can't be turned back into the address. Our hosting and sign-in providers (Vercel and Privy) also see your IP address and may keep it in their logs under their own policies.

Records of trades, fees, payments, sends, boosts and launches (including a launched coin's picture, which is linked from the coin itself), saved copies of your wallet's public blockchain activity, which terms you accepted, and moderation records are kept after you delete your account, for as long as we need them for legal, tax and safety reasons.

When you delete your account, your username is held for 30 days so nobody else can take it straight away.

Support conversations are kept for about a year after the last message, so we can follow up and deal with complaints.

Launch list: your email address is kept until you unsubscribe or ask us to delete it. When you unsubscribe, it moves to our do-not-email list, so we don't email you again (you can ask us to delete it from that list too). So the form can't be used to flood someone's inbox, we also keep a scrambled code made from the address for a day after we email it.

8. Cookies and browser storage

We use two cookies: one keeps you signed in, and one remembers that you entered the site password. Both last up to 30 days. If an existing account gives a date of birth under 18, one more cookie notes that on the device for a year. Privy also uses your browser's storage or its own cookies to keep you signed in to your wallet.

Your browser also stores things like drafts, recent searches, your payment choice and layout settings on your device, and copies of screens you've recently seen (for up to 3 days) so they open faster. The saved screens are cleared when you sign out. We do not use advertising or tracking cookies.

9. Automatic decisions

Some things happen automatically: filters stop posts that contain slurs or links from being published, limits stop people posting or signing in too often, and fees are worked out from the size of each trade. Removing published posts and banning accounts are decided by people, with one exception: an account whose owner gives a date of birth under 18 is limited automatically. If you think an automatic decision was wrong, contact us.

Support messages are answered first by an AI assistant, which says it's AI. It can explain how Callboard works and look up your own account and trades, but it can't change anything or make decisions about you. Anything it can't solve, and anything you ask to go to a person, is passed to our team, and a person replies.

10. Keeping it safe

We use encrypted connections, check every trade and fee on our servers, and limit who can use our admin tools. No system is perfectly secure.

If a data breach is likely to cause you serious harm, we will tell you, and we will tell the Office of the Australian Information Commissioner (OAIC) when the law requires it.

11. Your choices and rights

You can change your profile and settings at any time, and delete your account in Settings. You can export your wallet's private key before you go. You can leave the launch list at any time with the unsubscribe link in any of its emails.

You can ask to see the personal information we hold about you, or ask us to correct it. There is no charge, and we will reply within 30 days. If we cannot do what you ask, we will tell you why.

If you are in the European Union or the United Kingdom: we use your information to provide the service you signed up for, to meet legal duties, and for our legitimate interest in keeping Callboard safe and improving it. We email the launch list because you asked us to (your consent), and you can withdraw that at any time by unsubscribing. You can also ask us to delete your information, limit how we use it, send it to you in a common format, or stop using it, and you can withdraw any consent you gave. You can complain to your local data protection authority.

12. Age

Callboard is only for people aged 18 or over. If we learn that an account belongs to someone under 18, we limit it straight away: it can no longer post, message, buy or boost, but it can still sell, send and withdraw what it holds, so nothing is lost. It can then be deleted in Settings, which deletes its information except records we must keep (see section 2).

13. Questions and complaints

Use Help and support in Settings, email support@getcallboard.app, message @callboardstaff on Callboard, or contact us on X at x.com/callboardapp. You don't need a Callboard account to email us or contact us on X. Tell us what happened and what you would like us to do. We will look into it, may ask you for more details, and give you our answer and reasons in writing within 30 days.

If you are not happy with our answer, you can complain to the OAIC at oaic.gov.au.

14. Changes to this policy

We may update this policy when Callboard changes. The date at the top shows the latest version. If we make important changes, we will tell you on Callboard.