01Who we are
This Privacy Policy explains how ODIN Tools ("ODIN Tools", "we", "us") handles personal data when you use Thor.
It covers:
- the Thor Telegram bot (@thorsolana_bot);
- the Thor Telegram Mini App;
- the Thor web extension;
- the Thor pages on odin.tools.
ODIN Tools is a software company. Thor is non-custodial software.
Heimdall and the Thor Social Sniper desktop app have their own privacy policies. This policy is part of the Thor Terms and Conditions.
Contact: [email protected]
02Data we collect
Account data. From Telegram we receive:
- your Telegram user ID;
- your username;
- your first and last name, as shown on Telegram;
- your language.
We do not ask for your real name, ID documents, phone number or bank details.
Wallet data.
- The public addresses of the wallets you create or import.
- The identifiers our wallet provider uses for them.
- Your Security PIN (SIP), which we store so we can check it when you enter it.
Your wallets are created and secured by our wallet provider, Privy. Neither ODIN Tools nor Privy stores or has access to your full private key. When you import a wallet, the key you enter goes directly to Privy; we never receive or store it. When you export a key, it is shown only to you, on Privy's secure reveal page inside Thor, and never passes through our servers.
For perpetual futures and prediction markets, we also store:
- an encrypted trading key for your Hyperliquid account, which can trade but not withdraw;
- encrypted access credentials for your Polymarket account.
Activity data.
- Your trades, orders, positions and transfers.
- Your settings, presets and the wallets you copy trade.
- Your subscription payments, your referral link and who you referred.
- Your rewards and claims.
Acceptance records. When you accept the Terms or a risk notice, we keep the version you accepted and the date and time.
Connection data. When you use the Mini App, the web extension or our website, our servers receive:
- your IP address;
- the country and region it comes from;
- basic browser and device information;
- the times of your requests.
We also keep sign-in sessions so you stay logged in.
Location data for restricted features. For perpetual futures and prediction markets, we store:
- the country and region you declare;
- the country and region of your connection when you accept the risk notice.
We use these to apply the location rules of those features.
Support data. Messages, feedback and screenshots you send us.
Technical logs. Errors and diagnostic data that help us keep Thor running.
What we do not collect.
- We do not collect your seed phrases.
- We do not read your private Telegram chats.
- We do not track you across other websites or apps.
03How we use your data
We use your data to:
- provide Thor and carry out your instructions, orders and automations;
- calculate and collect fees, and to run subscriptions, rewards and referrals;
- keep accounts safe and to detect fraud, abuse and attacks;
- apply location and eligibility rules, including sanctions and the extra rules for perpetual futures and prediction markets;
- answer support requests and fix problems;
- improve Thor;
- comply with the law.
Our team receives internal alerts about trades and security events, such as a private key being exported. We use these alerts to support users and to spot fraud quickly.
If the law where you live requires a legal basis for this processing, we rely on:
- performing our contract with you, for providing Thor;
- our legitimate interests, for security, preventing abuse and improving Thor;
- legal obligations, for complying with the law.
04Who we share data with
We do not sell, rent or trade your personal data. We do not use it for advertising.
We share data only with the services Thor needs in order to work:
| Who | What | Why |
|---|---|---|
| Telegram | Your messages to and from the bot | Telegram is where the bot and Mini App run |
| Privy | Wallet identifiers and signing requests | To create, secure and sign for your wallets |
| Blockchains and transaction services | Wallet addresses and signed transactions | To send your transactions to the network |
| Exchanges, swap and bridge services | Transaction details for your trades | To carry out swaps, bridges and routing |
| Hyperliquid | Your perpetual futures account and orders | Only if you use perpetual futures |
| Polymarket | Your prediction market account and orders | Only if you use prediction markets |
| Market data providers | Token addresses you look at | To show prices, charts and token data |
| Hosting, security and network providers | Data stored and processed on our servers, and your connection data | To run Thor and protect it from attacks |
We may also share data:
- if the law requires it, or to respond to a valid legal request;
- to protect our users, ODIN Tools or the public from fraud or harm;
- with a company that takes over Thor, under this policy.
05Blockchains are public
Transactions you make with Thor are recorded on public blockchains. This includes your wallet addresses, the amounts, the tokens and the times.
Anyone can see this data. Nobody, including us, can change or delete it.
06Cookies and local storage
Our website, the Mini App and the web extension use cookies or browser local storage to keep you signed in and to remember your settings, such as your chain, language and layout.
We do not use advertising or cross-site tracking cookies.
07How long we keep data
| Data | How long |
|---|---|
| Account, wallet and settings data | While your account is active, then deleted on request |
| Trades, orders, payments and rewards | For as long as needed to run your account, settle fees and rewards, and meet legal obligations |
| Acceptance records | For as long as your account exists, and afterwards as long as needed to resolve disputes |
| Connection data and technical logs | Up to 90 days, unless needed longer to investigate a security issue |
| Support messages | Up to 2 years |
Data on public blockchains stays there permanently and is outside our control.
08How we protect data
We protect data with:
- encrypted connections;
- encryption of sensitive credentials;
- strict access controls;
- regular security reviews.
Your full private key is not stored by us or by our wallet provider, Privy.
No system is perfectly secure. If a breach affects your rights, we will tell you as the law requires.
09International transfers
Our servers and providers may be in countries other than yours. Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.
10Children
Thor is only for people aged 18 or over. We do not knowingly collect data from anyone younger. If you think a minor has used Thor, contact us and we will delete their data.
11Your rights
Depending on where you live, you may have the right to:
- Access. Get a copy of your data.
- Correction. Have wrong data fixed.
- Deletion. Have your data deleted.
- Restriction and objection. Limit how we use your data, or object to it.
- Portability. Get your data in a machine-readable format.
- Complaint. Complain to your data protection authority.
Note: Deleting your data does not delete anything on a blockchain. Before you ask us to delete your account, withdraw or export your funds.
To use your rights, email [email protected] from the account you use with Thor, or contact us through the bot. We reply within 30 days. We never discriminate against anyone for using their rights.
12Changes to this policy
We may update this policy. The current version is always on odin.tools with its "Last updated" date. If you keep using Thor after a change is published, the updated policy applies.
13Contact
For privacy questions and requests, email [email protected].