Privacy Policy

Introduction

Hedgen Ltd ("we", "us", or "our"), a company registered in England and Wales (Company Number: 16838911) with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website hedgen.xyz, use our Assay mobile app, and use our services.

By using our website, you consent to the data practices described in this policy.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

• Contact us through our contact form or email
• Request a due diligence report or other services
• Subscribe to our newsletter or updates

This information may include: name, email address, company name, job title, phone number, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage, including:

• Browser type and version
• Operating system
• IP address and general location data
• Pages viewed and time spent on pages
• Anonymous, non-identifying usage events, such as which links or buttons you click (for example, the App Store or outbound links)
• Referral source

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Deliver our due diligence and consulting services
• Send you service-related communications
• Improve our website and services
• Analyze website usage and trends
• Comply with legal obligations

Analytics and Cookies

We use PostHog, a product-analytics platform, to understand how visitors interact with our website and our Assay app. Our PostHog instance is hosted in the European Union, and we have configured it to be privacy-preserving:

• Analytics are anonymous: we never identify you, and we do not create personal profiles for anonymous visitors.
• We do not record or replay your screen or browsing sessions.
• Event data contains no personal information — only non-identifying usage signals (such as a page view, a link or button click, your referral source, and an approximate location derived from your IP address).
• PostHog stores an anonymous identifier in your browser (via cookies or local storage) to distinguish visits. It is not linked to your identity.
• Analytics traffic is routed through our own domain and sent to PostHog's servers in the European Union.

You can control cookies and local storage through your browser or device settings. Disabling them does not prevent you from using our website or the Assay app.

The Assay App

Assay is our free, read-only mobile app for reading the risk profile of DeFi protocols and tokens. It is designed to keep your data to a minimum:

• It requires no account, sign-up, or login.
• It is read-only: it never connects to your wallet, never accesses your funds, and never asks you to sign a transaction.
• It displays market data sourced from third parties such as DefiLlama.
• It uses only the anonymous, EU-hosted analytics described above, shared with our website so we can understand the overall product experience.

Because Assay requires no account and no wallet, we do not hold any personal data about Assay users beyond the anonymous, non-identifying usage analytics described in this policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and delivering our services (e.g., email service providers and analytics providers such as PostHog, hosted in the European Union)
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we securely delete or anonymize it.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access and receive a copy of your personal data
• The right to correct inaccurate or incomplete information
• The right to delete your personal data
• The right to object to or restrict processing
• The right to data portability

To exercise any of these rights, please contact us using the information provided below.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country or jurisdiction where data protection laws may differ. By using our services, you consent to the transfer of your information to these locations.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: