Privacy Policy

SanPay ("we", "us", or "our") operates the SanPay platform, including our website, APIs, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, company name, and password when you create an account
• Payment Information: Billing address and payment method details (processed securely by our payment processors)
• Communication Data: Any information you provide when contacting our support team

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, API calls made, timestamps, and session duration
• Device Information: Browser type, operating system, device identifiers, and IP address
• Blockchain Data: Public blockchain addresses and transaction data you submit for monitoring

1.3 Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze usage patterns
• Improve our Service

You can control cookies through your browser settings.

2. How We Use Your Information

We use collected information to:

• Provide the Service: Process transactions, monitor wallets, and deliver notifications
• Communicate: Send service updates, security alerts, and support responses
• Improve: Analyze usage patterns to enhance our platform
• Secure: Detect fraud, abuse, and security threats
• Comply: Meet legal obligations and respond to lawful requests

3. Information Sharing

We do not sell your personal information. We may share information with:

3.1 Service Providers

Third parties that help us operate the Service, including cloud hosting providers, payment processors, analytics services, and customer support tools.

3.2 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety, or to prevent fraud or illegal activity.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS) and at rest
• Regular security audits and penetration testing
• Access controls and authentication
• Secure API key management

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for legal compliance, dispute resolution, or agreement enforcement.

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Limit how we use your data

To exercise these rights, contact us at [email protected] .

7. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements.

8. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: [email protected]
• DPO Contact: [email protected]

11. GDPR Compliance (EU Users)

For users in the European Economic Area:

• Legal Basis: We process data based on contractual necessity, legitimate interests, and consent where applicable
• Data Controller: SanPay Ltd. is the data controller
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority