1. Who we are
This policy describes how BREADSLICE PTE. LTD., a company incorporated in Singapore (“Breadslice”, “we”, “us”), handles personal data in connection with our websites, wallet, bots and related software (the “Services”). We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).
2. What we cannot see
Breadslice is self-custodial software, and the most important facts about your data follow from that:
- We never hold or see your private keys or passkeys. They are created and stored on your own device.
- We never hold your funds, and we cannot move or freeze them.
- We never collect card numbers or bank credentials — the Services do not take card payments.
3. What we collect
- Contact and account data. An email address when you write to us or sign in through a provider such as Google, and the basic profile that provider shares.
- Wallet addresses and on-chain data. The public addresses you use with the Services, and the transactions associated with them. This data is public by the nature of blockchains — see section 4.
- Session metadata. The terms of sessions created or joined through our software: who requested, at what rate, when it started and stopped. Not the content of the underlying conversation — your chats happen in your chat apps, not on our systems.
- Support correspondence. What you send us when you contact support, including anything you choose to include.
- Technical data. Logs, device and browser information, and the essential cookies described in section 9.
4. Blockchain data is public and permanent
Transactions made with the Services are recorded on public blockchain networks. Those records — addresses, amounts, timestamps — are visible to anyone, are not held by us, and cannot be altered or deleted by us or by anyone else. Wallet addresses are pseudonymous, but they can become linkable to you through your own use of them. Rights that depend on deletion or correction cannot be exercised against a public blockchain, and this is a property of the technology rather than a choice of ours.
5. How we use personal data
- to provide, operate and secure the Services;
- to answer support requests and run our own metered support;
- to bill subscriptions and keep required business records;
- to improve the Services, using aggregated or de-identified data wherever that is enough;
- to meet legal obligations that apply to us. If the law ever comes to require more of us — for example identity verification — we will say so clearly in this policy before collecting more than we do today.
We do not sell personal data, and we do not run third-party advertising.
6. Who we share it with
- Partner entities in Vietnam, where a service — such as local operations or human support — is delivered by them. They receive what the service requires and handle it under contracts consistent with this policy.
- Service providers that run infrastructure for us — hosting, content delivery, sign-in — under their own confidentiality and processing obligations.
- Authorities, where the law requires it of us.
- A buyer or successor, if Breadslice or its assets are reorganised or acquired — under this policy’s protections.
7. International transfers
We are a Singapore company working with partner entities in Vietnam and infrastructure providers that may process data in other countries. Where personal data leaves Singapore we take steps required by the PDPA to ensure it remains protected to a comparable standard, normally by contract.
8. Retention and security
We keep personal data only as long as it is needed for the purposes above or required by law, then delete or de-identify it. We protect what we hold with measures appropriate to how little that is — and holding little is itself the design: data we never collect cannot leak.
9. Cookies
The Services use essential cookies only: the session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies. The full list, and how to manage them, is in our Cookie Policy.
10. Your rights
Under the PDPA you may ask us for access to the personal data we hold about you, ask us to correct it, and withdraw consent to our continued use of it (which may mean parts of the Services stop working for you). Write to the contact below; we will respond within the time the PDPA allows. Note the limits in section 4 for data recorded on public blockchains.
11. Children
The Services are not directed at children and may not be used by anyone under 18. We do not knowingly collect personal data from children; if you believe we have, contact us and we will delete it.
12. Changes and contact
We may update this policy from time to time; material changes will be announced through the Services and the date at the top of this page will change. Questions, requests, or our data protection officer: legal@breadslice.com. BREADSLICE PTE. LTD., Singapore.