1. Controller
[Legal entity name, registered address, contact for data protection matters and, where required, the data protection officer.]
2. What we process and why
| Data | Purpose | Lawful basis (to confirm) |
|---|---|---|
| Contact form: name, email, company, message | Answering your enquiry | Consent / legitimate interest |
| Account data: name, email, organisation, role | Providing the dashboard and API | Contract |
| Security logs: sign-in events, IP address, user agent | Protecting accounts and the service | Legitimate interest |
| API request logs (without secrets or authorization headers) | Debugging and abuse prevention | Legitimate interest |
| Payment observations: public chain data, merchant order references | Showing payment status and reconciliation | Contract |
We do not sell personal data, and this website uses no advertising or analytics trackers.
3. Minimisation
We collect only what each purpose needs. Business verification data is requested only when an organisation applies for capabilities that require it, and secrets are never logged.
4. Retention
[Retention periods per category, legal-hold rules and deletion schedule — to be defined with counsel.]
5. Processors and transfers
[List of sub-processors (hosting, email delivery, monitoring), their locations, and the safeguards used for any transfer outside the EEA.]
6. Your rights
Depending on your location you may have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Make a request through the contact form; we will verify your identity and respond within the legal deadline.
7. Complaints
You can lodge a complaint with the competent data protection supervisory authority. [Name the lead authority once the operating entity is established.]
8. Cookies
See the cookie notice.