What we collect, and what we never touch.

Who we are

Dossier is operated by Devvion, Inc., a Delaware corporation. When this notice says "we" or "us", it means that company.

Questions about anything below go to support@devvion.com.

What we collect

Only what the product needs to do its job. Specifically:

• Wallet addresses you choose to connect, and the public on-chain activity belonging to them. This is already public on the Solana ledger; we read it, we do not create it.
• Your email address, if you sign up with one or link it later.
• Billing details, if you buy a paid plan. These go to Stripe directly, and card numbers never touch our servers.
• Ordinary server logs: IP address, browser type, pages requested. Standard for any website, kept short-term for security and debugging.

What we never collect

We never ask for, receive, or store private keys or seed phrases. Connecting a wallet signs one free, off-chain message that proves ownership and cannot move funds. We never request transaction approval or token spend permissions.

If anything claiming to be us asks you to approve a transaction, it is not us.

Why we use it

To reconstruct your trades, grade them, write the post-mortems, build your pattern profile, run your account, take payment for paid plans, and keep the service secure.

We do not use your data to train models for anyone else, we do not sell it, and we do not run ads.

Who we share it with

Service providers, each doing one job. Where a provider is named below, you either interact with it directly or it handles something you would want to know about by name. The rest are infrastructure, described by what they do and what reaches them:

• Vercel. Serves this marketing site and counts its page views. IP address and standard request logs. Web Analytics is cookieless.
• Privy. Signs you in and links your wallet. Email address and wallet address. You interact with it directly at sign-in.
• Stripe. Processes payment for paid plans. Billing details and payment credentials, collected by Stripe directly. Card numbers never touch our servers.
• Anthropic. Generates the written post-mortem for each closed trade. The trade being analysed and the surrounding market context. Under our agreement it is not used to train their models.
• DataFast. Counts page views and where visitors arrive from, on this marketing site. Page visited, referring site, coarse location and device type. Its default script sets a cookie to recognise returning visitors.
• DexScreener. Public token and market data for the ticker and charts. None. Requests are made from our servers, never from your browser.
• Application hosting and database infrastructure. Runs the product and stores your journal. Everything in your account, encrypted in transit and at rest.
• Solana blockchain data providers. Reads the public on-chain activity for the wallets you connect. Wallet addresses. No email, no billing data.
• AI embeddings. Builds the numerical representations behind your pattern profile. Derived features of your trades. No email, no billing data.

Your trades and AI

Writing a post-mortem means sending the trade and its market context to an AI provider. That is Anthropic. Under our agreement with them, your data is not used to train their models, and it is not retained beyond what is needed to return the analysis.

The numbers in your profile are not produced by the AI. Frequencies, market caps and pattern counts are computed from your own data; the model only interprets them, so it cannot invent a statistic about you.

The full provider list

If you want every provider by name rather than by category, ask at support@devvion.com and we will send the current list.

How long we keep it

Your journal stays for as long as your account does. Delete a wallet and its trades, positions and analyses are hard-deleted immediately. Not flagged as deleted, not held for thirty days. Delete your account and the same applies to everything else.

One caveat, stated plainly because the alternative is a promise we cannot keep: our database is backed up daily, and those encrypted infrastructure backups still contain rows you deleted until they expire, which takes days. They are never used to restore deleted data to your account, and they age out on their own.

Getting your data out, or getting it deleted

On Pro and Degen you can export your journal to CSV or Obsidian-ready Markdown at any time from inside the product, without asking us. Export is not included on Free, so on that plan email support@devvion.com and we will send you a copy of your data.

To delete a wallet or your whole account, use the product. If something is stuck, email support@devvion.com and we will do it for you.

Cookies and analytics

The product sets what is needed to keep you signed in and to keep the service secure.

This marketing site also runs DataFast to count page views and see where visitors arrive from. Its script sets a cookie so a returning visitor is not counted twice.

Vercel Web Analytics runs alongside it, reporting page views and load performance per page. It is cookieless. Between them that is all the analytics on the site, and neither one follows you anywhere else.

There are no advertising cookies, no ad networks, and nothing that follows you to other sites.

Changes

If this notice changes in a way that matters, we will say so on this page and update the date at the top. Continuing to use the product after that means the new version applies.