Privacy Policy

Last updated: 10 October 2026

1. What we store

• Account data — email, name, company, country, hashed password, 2FA secret (if enabled).
• Operational data — payments you create (amounts, assets, addresses, transaction IDs), API key metadata (never the secret itself — only its hash), webhook endpoints and delivery logs, your ledger.
• Technical data — IP address and user agent recorded on sign-in and in the audit log for security purposes.

2. What we do not store

• We never store card data (we don't process cards).
• Exchange API keys you enter are encrypted with AES-256-GCM before being written to the database and are only decrypted to query the exchange on your behalf.
• We do not sell or share personal data with advertisers.

3. Why we process it

To operate the service (detect your payments, credit your balance, deliver webhooks), to secure it (rate limiting, audit trail), to bill subscriptions, and to send transactional emails (welcome, subscription activated, password changed). No marketing emails without consent.

4. Third parties

Depending on the providers the operator enables, payment detection may query Binance, OKX, Bybit, BingX, TronGrid, mempool.space or Etherscan using the operator's own credentials; customer payment metadata (amounts and addresses) is not shared with them beyond what those queries inherently require. Rates are fetched from public market-data endpoints (Binance, CoinGecko).

5. Retention

Account and payment records are kept while your account is active and for a reasonable period afterwards to satisfy accounting and dispute needs. You may request deletion of your account by emailing support; we will delete or anonymise personal data that we are not legally required to keep.

6. Security

Passwords are hashed with Argon2id/bcrypt. Provider credentials are encrypted at rest. All API access requires personal keys. We recommend enabling two-factor authentication in your dashboard settings.

7. Your rights

You can access and correct your data in the dashboard settings, and contact support@zepharionlabs.com for export or deletion requests.