This policy explains what personal information Cryptain ("Cryptain", "we") collects, why, and what you can do about it. It covers merchants who hold an account, the people they invite to their team, and payers who use our checkout pages.
1. Who is responsible
For merchant accounts, Cryptain decides how your information is used. For payers, the merchant you are buying from is responsible for your order details; we process the payment information on their behalf and for our own legal obligations. Questions about this policy go to support@cryptain.net.
2. What we collect
From merchants and team members
- Account details: name, email, password (stored only as a one-way hash), two-factor settings, language and time zone.
- Business details: business name, website, country, address, registration and tax numbers.
- Identity checks: when required, identity documents, a selfie or liveness check, proof of address and information about owners and directors.
- Payment and wallet data: stores, invoices, balances, withdrawal addresses, public keys and transaction history.
- Usage and security data: IP address, device and browser, sign-in times, actions in the audit log and API request logs.
- Messages: support tickets, chat conversations and call requests.
From payers
- What the merchant sends us with the order, such as an order number, description and sometimes an email address.
- The coin and network you choose, the amount, the address you pay to, the transaction hash and the sending address visible on the blockchain.
- Technical data needed to show the checkout page safely, such as your IP address and browser.
3. Why we use it
- To run the Service: create invoices, detect payments, credit balances, send withdrawals and notify merchants. (Performing our contract.)
- To keep accounts safe and stop fraud, abuse and attacks. (Our legitimate interest in a secure service.)
- To meet legal duties, including anti-money-laundering, sanctions, tax and record-keeping rules. (Legal obligation.)
- To answer questions and give support. (Contract and legitimate interest.)
- To send product news, only if you agreed. You can unsubscribe at any time. (Consent.)
We do not sell personal information and we do not use it for third-party advertising.
4. Blockchain data is public
Cryptocurrency transactions are recorded on public blockchains that anyone can read and nobody can edit. Transaction hashes, amounts and addresses linked to a payment will stay public even if we delete our own copy.
5. Automated decisions
We use automatic rules to flag unusual activity, for example withdrawals to new addresses or payments from addresses on sanctions lists. A flag can pause an action until a person reviews it. You can ask for that review and give us your side.
6. Who we share it with
- Service providers who host our servers, deliver email, provide blockchain data and exchange rates, check identities, protect forms from bots and, if the merchant turns it on, answer chat questions with AI. They may only use the data to provide their service to us.
- The merchant you paid, who sees the payment details for their order.
- Authorities where the law requires it, such as a court order or a report we must file.
- A buyer of our business, under the same protections, if Cryptain is sold or merged.
Some providers process data in other countries. Where the law requires it, we use contracts with safeguards for those transfers.
7. How long we keep it
We keep account and payment records for as long as your account is open and for the period the law requires afterwards, which for financial and anti-money-laundering records is commonly five to seven years. Security logs are kept for a shorter time. When we no longer need information, we delete or anonymise it.
8. Security
We protect data with encryption in transit, encryption of secrets at rest, access controls, two-factor authentication for staff, audit logs and regular backups. Read more on our security page.
9. Your choices and rights
Depending on where you live, you can ask to see the information we hold about you, correct it, delete it, limit how we use it, receive a copy in a portable format, or object to some uses. Merchants can update most details in the dashboard and download their data. We may need to keep some records to meet legal duties. Email support@cryptain.net and we will answer within 30 days. You can also complain to the data protection authority where you live.
10. Cookies
We use a few cookies to keep you signed in, remember your settings and protect forms. See the Cookie Policy.
11. Children
The Service is for businesses and is not meant for anyone under 18.
12. Changes
If we make important changes we will tell merchants by email or in the dashboard before they apply. The date at the top shows the latest version.
Questions about this document? Contáctanos.