1. Information We Collect.

1. Account and contact data. Name, email address, company name, role, and other details you provide when you sign up, request access, contact sales or support, or otherwise communicate with us.
2. Billing data. Plan, invoices, and payment records. If you pay in stablecoins, this includes the wallet address and on-chain transaction used for payment. We do not store full payment card numbers.
3. Usage data. When you send requests to the Services we process technical data such as IP address, API key, request and response metadata (method, chain, timestamps, status, latency), and the contents of RPC requests, which may include public blockchain addresses and signed transactions you choose to submit.
4. Website data. Device and browser information, pages visited, and referring URLs, collected through server logs, cookies, and similar technologies.

2. Crypto Purchases Through MoonPay.

We may let you buy USDC with a payment card through MoonPay, a third-party provider. MoonPay operates that purchase and collects the information needed to complete it, including identity verification documents, payment card details, and transaction data, under its own terms and privacy policy. Direct does not receive your card details or identity documents. MoonPay may share limited transaction information with us, such as the transaction status, amount, asset, destination wallet address, and transaction ID, so we can confirm your payment and provide support.

3. How We Use Information.

We use personal information to:

1. provide, operate, route, and cache requests for the Services;
2. manage accounts, billing, and customer relationships;
3. monitor, investigate, and prevent fraud, abuse, and security incidents;
4. maintain, improve, and optimize the Services;
5. respond to inquiries and send service and, where permitted, marketing communications; and
6. comply with legal obligations and enforce our agreements.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, and your consent where required (for example, for certain cookies or marketing).

4. How We Share Information.

We do not sell personal information or share it for cross-context behavioral advertising. We share it only with:

1. Service providers that host, operate, and support the Services, such as cloud hosting, email, analytics, and payment providers, under contracts that limit their use of the data;
2. Blockchain node operators and network partners that help fulfill RPC requests you send through the Services;
3. MoonPay, as described in Section 2;
4. Professional advisers and authorities where needed to comply with law, respond to lawful requests, or protect the rights, safety, and property of Direct, our customers, or others; and
5. A successor entity in connection with a merger, acquisition, financing, or sale of assets.

5. Public Blockchains.

Transactions you broadcast through the Services are recorded on public blockchains that we do not control. That data is visible to anyone and cannot be changed or deleted by Direct.

6. Retention and Security.

We keep personal information for as long as needed for the purposes described in this Policy, including to provide the Services, keep business and tax records, resolve disputes, and meet legal obligations, and then delete or de-identify it. We maintain commercially reasonable administrative, physical, and technical safeguards designed to protect personal information, but no method of transmission or storage is completely secure.

7. International Transfers.

Direct is based in the United States and we and our service providers may process personal information in the United States and other countries. Where required, we protect transfers of personal information from the EEA, UK, or Switzerland with appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

8. Your Rights.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email info@direct.dev. We will not discriminate against you for exercising them. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority. Where we process personal information on behalf of a business customer, we will refer your request to that customer.

9. Children.

The Services are intended for businesses and developers and are not directed to anyone under 18. We do not knowingly collect personal information from children.

10. Changes and Contact.

We may update this Policy from time to time and will post the updated version on this page with a new “Last updated” date. Questions about this Policy can be sent to info@direct.dev or to 0ms Inc., 1032 E Brandon Blvd #6921, Brandon, FL 33511.