Privacy Policy

Effective Date: March 5, 2026

This Privacy Policy explains how ReplayState handles information in connection with demo, pilot, and production evaluation workflows for institutional users.

1. Data We Process

• API request metadata (timestamps, endpoint, rate-limit context, request IDs).
• User-provided configuration inputs for simulation and alert workflows.
• Public blockchain data and derived analytical outputs.
• Operational logs required for reliability, debugging, and security monitoring.

2. Purpose of Processing

• Deliver simulation, fee analysis, export, and monitoring functionality.
• Maintain service integrity, fraud prevention, and abuse controls.
• Support operational analytics and pilot performance reporting.

3. Data Retention

Retention windows are determined by environment type (demo, pilot, production), contractual obligations, and security/compliance requirements. Institutional contracts may define stricter retention and deletion SLAs.

4. Data Sharing

ReplayState does not sell customer data. Data may be disclosed to subprocessors and infrastructure providers strictly for service operation, security, and support obligations, subject to contractual controls.

5. Security Measures

• Authenticated API boundaries for protected endpoints.
• Operational logging and request correlation for incident response.
• Evidence artifact hashing for integrity verification workflows.

Additional production controls (RBAC, key lifecycle controls, and expanded telemetry) are defined in the enterprise security roadmap.

6. Your Rights and Contact

For institutional privacy requests, data deletion requests, or policy questions, contact: legal@replaystate.com.