Privacy Policy
Last updated 14 September 2026
Who runs this
XAudit is an independently operated service that reports publicly recorded USDT blacklist activity on the TRON blockchain. It is not affiliated with Tether Limited or the TRON Foundation. For any question or request about your data, write to cao.4321519@gmail.com.
What signing in gives us
Sign-in goes through Google OAuth. We never see your Google password. From your profile we store your email address, which identifies your account, plus your display name and profile image URL, which appear in the interface.
We also store account state we create ourselves: your role, which features are enabled, when access expires, your API key and its call count, and when the account was created.
What you add yourself
- The blockchain addresses you ask us to watch, and any label you give them.
- The webhook URL alerts are delivered to, and its shared secret if you set one.
- Your organisation and role in it, if you create or join one.
We keep a log of alerts already sent so the same event is not delivered twice.
What we never do
- We do not sell or rent your data, and we run no advertising trackers.
- We never ask for a password, seed phrase, private key or payment card.
- We do not request wallet signatures and cannot move, freeze or unfreeze funds. The service only reads public chain data.
Blockchain data
Freeze, unfreeze and destroy events, address balances and multisig proposals come from the public TRON blockchain via the TronGrid API. That record is public and exists independently of this service — we report on it rather than collect it from you.
Third parties
- Google, for authentication, under its own privacy policy.
- TronGrid, for read-only chain queries. We send addresses, never anything about you.
- Your webhook provider, which receives the alerts you configured.
Retention and deletion
Account data is kept while the account exists. Email cao.4321519@gmail.com from your registered address to have your account, monitored addresses, webhooks and alert history deleted. You can revoke XAudit's access at any time from your Google account security settings.
Security
Traffic is served over HTTPS and sessions are held in signed cookies. The database is not reachable from the public internet. No service can promise perfect security, so do not store anything here you could not stand to have exposed.
Changes to this policy
If this policy changes materially, the date above is updated.