Privacy Policy
Last updated: June 1, 2025 · Applies to all users of CryptoGateway
1. Information We Collect
When you register, we collect your name, email address, business name, and contact details.
We collect blockchain wallet addresses, transaction IDs, and payment amounts required to process crypto payments. We do not store private keys.
We log API calls, IP addresses, request timestamps, and response codes for security and debugging purposes.
We collect browser type, operating system, and IP address for security monitoring and fraud prevention.
We retain contact form submissions and support emails to resolve queries and improve our service.
2. How We Use Your Information
To process cryptocurrency payments, generate wallet addresses, send webhooks, and settle funds to your wallet.
To detect fraud, prevent abuse, monitor for suspicious activity, and protect your account.
To send transaction confirmations, payment alerts, service updates, and respond to your queries.
To comply with applicable anti-money laundering (AML) laws and regulatory requirements.
To understand how merchants use our platform and improve our services.
3. Data Sharing
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We may share data with trusted providers who help operate our platform (e.g., email delivery, server hosting) under strict confidentiality agreements.
We may disclose information when required by law, court order, or to protect our legal rights.
Blockchain transactions are publicly visible by nature. Wallet addresses and transaction IDs on public blockchains cannot be made private.
4. Data Retention
Retained while your account is active and for 7 years after closure for legal and tax compliance.
Payment records retained for 7 years per financial regulations.
API access logs retained for 90 days then purged.
Retained for 2 years after last contact.
5. Cookies
Essential cookies keep you logged into the merchant dashboard. These are deleted when you close your browser.
Store your dashboard display preferences (optional, consent-based).
Help us understand how visitors use the site. You can decline these via the cookie banner.
6. Security
All data is transmitted over TLS/SSL. Passwords are hashed with bcrypt. JWT tokens use HS256 signing.
Role-based access (Admin/Sub-admin/Merchant) ensures each user sees only their own data.
We never store private keys on our servers. All wallet keys are derived client-side from your MASTER_MNEMONIC.
7. Your Rights
You may request a copy of the personal data we hold about you.
You may update your account information at any time via the dashboard settings.
You may request deletion of your account and personal data subject to our legal retention obligations.
You may export your payment history in CSV format from the dashboard.
8. Contact
For privacy questions, data requests, or to report a privacy concern, email us at: support@srglobalmarkets.com