This notice describes the personal data processed by CryptoToAI, the purpose of each category, and the basis on which it is retained.
1. Categories of data
Order data. Order identifier, plan and term, price, deposit coin and network, deposit address and amount, swap provider reference, settlement asset, amount and transaction identifier.
Contact data. The delivery email address supplied at checkout.
Request metadata. Source IP address, user agent string, ISO country code and referring URL, captured at the point of order.
2. Purpose and necessity
Order and contact data are necessary to perform the transaction: without them no subscription can be purchased and no redemption link delivered. Request metadata is retained for support correspondence and for detecting fraudulent order patterns. No category is used for profiling, advertising, or automated decision-making producing legal effects.
3. Categories not processed
No authentication credentials, as the service operates without accounts. No payment card data at any stage. No name, postal address or telephone number. No analytics identifiers, advertising identifiers or third-party tracking of any kind.
4. Recipients
The swap provider receives the transaction parameters required to execute an exchange. Contact data is not disclosed to it. No other recipient exists; data is not sold, licensed, or transferred to advertisers or data brokers.
5. Retention
Order records are retained indefinitely so that order identifiers remain resolvable for support purposes. Web server logs rotate on a fixed schedule and are not joined to order records.
6. Requests
Access and erasure requests are accepted from the email address associated with an order. Erasure is irreversible and terminates the ability to support that order.