Privacy Policy

1. Controller and Contact

Vision Hub is engineered and operated by Visiondynamics AG. Visiondynamics AG is the controller for personal data processed through Vision Hub unless another provider acts as an independent controller for its own service.

Our corporate Visiondynamics AG Privacy Policy provides group-level context. This Vision Hub policy is the service-specific notice for Vision Hub processing.

2. Non-Custodial Wallet Design

Vision Hub is designed so that private keys, recovery phrases, wallet passwords, and locally encrypted wallet data remain under your control. We do not ask you to create a Visiondynamics account, complete KYC, or send us your recovery phrase.

Public wallet addresses, transaction hashes, balances, token metadata, and network activity may be visible on public blockchains. Public-key identifiers may qualify as personal data when they can be linked to a natural person. Public ledger data is not controlled by Visiondynamics and generally cannot be erased or modified by us. Where possible, wallet data remains on your device rather than on our systems.

3. Personal Data We Process

• Website access data: IP address, user agent, requested URL, referrer, timestamps, and error logs needed to serve and secure the website.
• Download routing: browser and device signals processed locally in your browser to show the appropriate App Store or Google Play link. If you follow those links, Apple or Google process your visit under their own terms.
• Support communications: your email address, name if provided, message content, attachments, and related metadata when you contact Vision Hub support by email.
• Wallet and network operations: public wallet addresses, public keys, transaction requests, transaction hashes, chain IDs, bridge requests, RPC requests, indexing requests, and connection metadata required to display balances, broadcast transactions, connect to dApps, or use WalletConnect.
• Operational logs: IP addresses, request metadata, API routing information, and security events processed by Visiondynamics or its processors for rate limiting, DDoS protection, abuse prevention, debugging, and service reliability.

4. Purposes and Legal Basis

• Providing Vision Hub: to operate the website, app downloads, wallet connectivity, RPC/indexer access, and support. GDPR legal basis where applicable: performance of a contract or pre-contractual steps.
• Security and reliability: to prevent abuse, defend against attacks, enforce rate limits, resolve incidents, and maintain service stability. GDPR legal basis: legitimate interests.
• Legal and compliance: to comply with applicable law, preserve records, and respond to competent legal authorities. GDPR legal basis: legal obligation or legitimate interests.
• Local wallet functionality: to store app state, wallet settings, and connection state on your device. GDPR legal basis: performance of a contract and legitimate interests in providing a secure wallet interface.

We do not sell personal data and do not use Vision Hub for advertising profiles, behavioral advertising, or non-essential analytics. We do not collect phone numbers, dates of birth, or government identifiers through Vision Hub unless you voluntarily provide that information in a support message.

5. Recipients and Third-Party Services

Vision Hub uses processors and independent services only where needed to provide the wallet and protect the service:

• Visiondynamics-operated infrastructure: wallet, indexer, API, and application infrastructure operated by Visiondynamics.
• External blockchain infrastructure providers: RPC, indexing, relay, bridge, or similar technical services used only where needed to display balances, route requests, connect wallets, or support user-initiated transactions.
• Network delivery and security providers: DNS, CDN, TLS, DDoS mitigation, email obfuscation, and related edge or network security services.
• App distribution and notification providers: mobile app-store distribution and, where enabled, device-notification services.
• Hosting and infrastructure providers: hosting, deployment, compute, storage, and operational infrastructure used to run Vision Hub.
• Email and support providers: mailbox, spam filtering, routing, and support tooling used to answer messages.
• Authorities and advisers: courts, regulators, law enforcement, lawyers, auditors, or other advisers where required by law or necessary to protect rights.

6. International Transfers

Our servers and service providers may operate globally, including in Switzerland, the EEA, the United States, and other countries or regions depending on routing, failover, provider architecture, and deployment.

Where data is transferred to a country or international body without an adequate level of protection under Swiss or EU law, Visiondynamics intends to rely on a lawful transfer mechanism required by applicable law for the relevant recipient, which may include an adequacy decision, a certification framework, standard contractual clauses, or another legally recognized safeguard or exception, together with data processing agreements, encryption in transit, access controls, and data minimization. You can request information about the relevant transfer mechanism by writing to [email protected].

7. Cookies and Local Storage

The Vision Hub website does not use advertising cookies, tracking pixels, social-media cookies, fingerprinting cookies, or behavioral analytics tools. It may use strictly necessary local storage or similar browser storage for interface state. No consent banner is displayed because no non-essential tracking is active.

The Vision Hub app stores wallet data, settings, connection state, and cache data locally on your device. WalletConnect may store session data on your device and through the WalletConnect relay when you choose that connection method.

You can delete browser storage through your browser settings and app-local data through your device or app controls. Deleting local wallet data without a backup may make a wallet unrecoverable.

8. Retention

• Website and infrastructure logs: normally retained for up to 30 days, unless needed longer for security incidents, abuse investigations, legal claims, or compliance.
• Support communications: normally retained for up to 24 months after the matter is closed, unless a longer legal or dispute period applies.
• Wallet data stored on your device: retained until you delete the app, reset the wallet, or clear the relevant device storage.
• WalletConnect sessions: retained until session expiry, disconnect, or deletion under the WalletConnect/Reown tooling.
• Public blockchain data: retained by the relevant blockchain network and may be permanent.

9. Your Rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, and portability of personal data we control. Some data cannot be deleted by Visiondynamics because it is stored only on your device, controlled by a third-party service, or permanently recorded on a public blockchain.

Send privacy requests to [email protected]. We may need to verify your identity and will respond to legitimate requests within 30 days unless applicable law allows or requires a different timeframe.

You may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland, www.edoeb.admin.ch. If the GDPR applies to you, you may also complain to your local EU or EEA supervisory authority.

10. Security and Breach Notification

We use technical and organizational measures designed to protect operational data, including encrypted transport, access controls, rate limiting, infrastructure monitoring, and least-privilege practices. If a data security breach is likely to result in a high risk to affected individuals, we will notify the FDPIC as soon as possible and inform affected individuals where required. Where the GDPR applies, we will also notify the competent EU supervisory authority within 72 hours when required by Article 33 GDPR.

11. Automated Decisions and Profiling

Vision Hub does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects. Automated security controls may block or throttle abusive traffic, but they are used only to protect the service and can be reviewed if you contact us.

12. Updates

We may update this policy when the service, infrastructure, or legal requirements change. Material changes will be posted here with a new update date. For company details, see the Impressum.