Legal Documentation

Privacy Policy

Learn how Cryptrac protects your privacy and handles your personal information

Effective: September 19, 2025
Version 1.0
Table of Contents

1. Introduction

Protecting Your Privacy is Our Priority

This Privacy Policy explains how we collect, use, and protect your information

Cryptrac Solutions (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cryptocurrency payment processing platform, website, mobile applications, and related services (collectively, the “Service”).

This Privacy Policy applies to all users of our Service, including merchants who use our platform to accept cryptocurrency payments and customers who make payments through our system. By using our Service, you consent to the data practices described in this policy.

We understand that privacy is fundamental to trust, especially in the financial technology sector. Our approach to privacy is built on principles of transparency, data minimization, user control, and security. We collect only the information necessary to provide our services effectively and securely, and we implement robust measures to protect your data from unauthorized access or misuse.

This Privacy Policy should be read in conjunction with our Terms of Service and Cookie Policy, which provide additional information about your rights and responsibilities when using our Service. We encourage you to review all of these documents carefully to understand how we handle your information.

2. Information We Collect

We collect several types of information to provide, maintain, and improve our Service. The information we collect varies depending on how you interact with our platform, whether as a merchant, customer, or website visitor.

Account and Profile Information

Collected when you register for a merchant account or interact with our Service:

  • Business name and contact information
  • Individual contact details for account administrators
  • Business registration and tax identification numbers
  • Account preferences and settings

Financial and Payment Information

Essential for our cryptocurrency payment processing services:

  • Cryptocurrency wallet addresses for each supported currency
  • Bank account information if using conversion services
  • Transaction amounts and currency selections
  • Payment confirmation data from blockchain networks

Important: We do not store private keys or have access to your cryptocurrency wallets beyond the addresses you provide.

Transaction Data

Comprehensive records of all payment activities:

  • Payment link details including titles, descriptions, and amounts
  • Transaction timestamps and status updates
  • Blockchain transaction identifiers and confirmation data
  • Subscription billing information for recurring payments

Technical Information

Automatically collected to ensure proper functionality and security:

  • IP addresses and geolocation data
  • Browser type and version information
  • Device identifiers and operating system details
  • Usage patterns and feature interactions

3. How We Use Your Information

We use the information we collect for several specific purposes that are essential to providing our cryptocurrency payment processing services and maintaining a secure, efficient platform for all users.

Service Provision and Operation

Our primary use of your information:

  • Create and maintain your merchant account
  • Facilitate cryptocurrency payment transactions
  • Generate payment links and process subscription billing
  • Provide customer support and technical assistance

Security and Fraud Prevention

Critical aspect of our operations, particularly given the irreversible nature of cryptocurrency transactions:

  • Analyze transaction patterns and user behavior
  • Monitor for suspicious account access or unusual usage
  • Implement security measures to protect against unauthorized access
  • Maintain audit logs to support security investigations

Compliance and Legal Obligations

Meeting various regulatory requirements in the financial services and cryptocurrency sectors:

  • Comply with anti-money laundering (AML) and KYC regulations
  • Respond to lawful requests from government authorities
  • Maintain records as required by financial services regulations
  • Cooperate with regulatory investigations and audits

Service Improvement and Development

Using aggregated and anonymized data to enhance our platform:

  • Analyze usage patterns to identify areas for improvement
  • Monitor system performance to optimize speed and reliability
  • Gather feedback to guide product development decisions
  • Understand how users interact with our Service

4. Information Sharing and Disclosure

We share your information with third parties only when necessary to provide our services, comply with legal obligations, or protect our legitimate interests. We do not sell your personal information to third parties for marketing purposes.

Service Providers and Business Partners

Limited access to your information as necessary to support our operations:

NOWPayments

Primary cryptocurrency payment processor

  • • Transaction data for payment processing
  • • Payment amounts and cryptocurrency types
  • • Wallet addresses for transaction routing

Supabase

Database and authentication provider

  • • Account information storage
  • • Transaction records in encrypted databases
  • • Authentication and session management

SendGrid

Email service provider

  • • Transaction confirmations
  • • Account notifications
  • • Service-related communications

Security: Each service provider is bound by contractual obligations to protect your information and use it only for authorized purposes.

Legal and Regulatory Disclosures

May be necessary to comply with applicable laws and regulations:

  • Respond to subpoenas, court orders, and legal processes
  • Cooperate with anti-money laundering investigations
  • Provide information to tax authorities as required
  • Protect the safety of our users or the public

5. Data Security and Protection

Protecting your information is a fundamental responsibility that we take seriously. We implement comprehensive security measures designed to safeguard your data against unauthorized access, alteration, disclosure, or destruction.

Technical Safeguards

  • Industry-standard TLS encryption for all data transmission
  • Encrypted databases with multiple access control layers
  • Network security with firewalls and intrusion detection
  • Multi-factor authentication for administrative access

Administrative Safeguards

  • Strict access control policies for authorized personnel
  • Background checks and security training requirements
  • Regular access permission audits and reviews
  • Comprehensive audit logs of all data access

Ongoing Security: We conduct regular security assessments, penetration testing, and maintain incident response procedures to quickly detect and address any security concerns.

6. Your Privacy Rights and Choices

We believe that you should have control over your personal information, and we provide several mechanisms for you to exercise your privacy rights and manage how your information is used.

Access and Portability Rights

Request information about the personal data we have collected:

  • Request a copy of your personal information
  • Transfer data to another service provider
  • Access account information and transaction history

Correction and Update Rights

Ensure your personal information is accurate and up-to-date:

  • Update account information through dashboard
  • Request corrections for inaccurate data
  • Modify communication preferences

Deletion Rights

Request deletion of your personal information:

  • Delete your account and associated data
  • Remove personal information from active systems
  • Export important data before deletion

Communication Preferences

Manage how we communicate with you:

  • Opt out of marketing communications
  • Receive only essential account notifications
  • Control email and notification settings

7. International Data Transfers and Processing

As a global cryptocurrency payment processing platform, we may transfer and process your information in countries other than your country of residence. We are committed to ensuring that your information receives appropriate protection regardless of where it is processed.

Legal Frameworks for International Transfers

When we transfer personal information from the European Union or other regions with specific data protection requirements, we rely on appropriate legal mechanisms:

  • Adequacy decisions by regulatory authorities
  • Standard contractual clauses for data protection
  • Other approved transfer mechanisms

8. Data Retention and Deletion

We retain your information only as long as necessary to provide our services, comply with legal obligations, and protect our legitimate interests. Our data retention practices are designed to balance your privacy rights with our operational and legal requirements.

Account Information

Retained for the duration of your relationship with us

  • • Active merchant accounts
  • • Business information
  • • Contact details
  • • Account preferences

Transaction Data

Governed by financial services regulations

  • • Several years for compliance
  • • Anti-money laundering requirements
  • • Tax obligations
  • • Audit purposes

Communication Data

Retained for customer support and service improvement

  • • Support tickets
  • • Email communications
  • • Feedback and surveys
  • • Service interactions

9. Children's Privacy

Our Service is not intended for use by individuals under the age of 18, and we do not knowingly collect personal information from children. Cryptocurrency payment processing involves complex financial transactions that require adult understanding and legal capacity to enter into binding agreements.

Important Notice

  • We do not knowingly collect personal information from children under 18
  • If we become aware of collecting child data, we will delete it promptly
  • Parents should contact us immediately if they believe their child has provided information

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes to this policy, we will provide appropriate notice to users and, where required by law, obtain consent for new uses of personal information.

Notification Methods

  • Email notifications to registered users
  • Prominent notices on our website
  • Dashboard notifications for significant changes

Your Rights

  • Reasonable time to review changes
  • Adjust privacy preferences if needed
  • Discontinue service if disagreeing with changes

11. Contact Information and Privacy Support

We are committed to addressing your privacy concerns and questions promptly and thoroughly. Our privacy team is available to help you understand our privacy practices, exercise your privacy rights, and resolve any issues related to your personal information.

Cryptrac Solutions

Privacy Inquiries

privacy@cryptrac.com

General Support

support@cryptrac.com

Response Time: We aim to respond to privacy-related inquiries within 48 hours and will work with you to address any concerns about your personal information.

Privacy Policy Acknowledgment

By using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and consent to our data practices as described herein.

Last Updated: September 19, 2025
Version 1.0