This Policy explains how SmartPayPro handles personal data when you visit our website, contact us or use our API. We collect as little as we can: the API runs on wallet addresses and IDs that you choose, not on your customers' names or documents.
01Who is responsible
SmartPayPro is the controller of the personal data from our website, our contact form and our relationship with our customers.
For data about your customers that goes through the API, such as playerId and wallet addresses, you are the controller and we process it on your behalf to provide the Service.
02What we collect
- Contact form: your name, email, company or website, Telegram or WhatsApp handle, type of business, expected monthly volume, your message and the language of the page.
- Customer accounts: the names and contact details of the people we deal with at your company, your company details, your wallet addresses and the fee settings of your sites.
- API use: your requests and the records they create, including playerId, orderId, deposit and payout addresses, amounts, transaction hashes and timestamps. Our logs record the method, route, status, duration and platformId of each request, never API keys or signatures.
- Website visits: our hosting provider receives technical data such as your IP address, browser and the pages you request, to deliver the site and keep it secure.
03Why we use it
- To reply to your contact request and discuss next steps, because you asked us to.
- To set up your account, run the API, send webhooks and provide history and reports, under our contract with you.
- To keep the Service secure, prevent fraud and abuse, and fix errors, based on our legitimate interest.
- To meet legal obligations, such as accounting, tax and requests from authorities.
We don't sell personal data and we don't use it for advertising.
04Data on the blockchain
Payments and payouts are recorded on Polygon, a public blockchain. Wallet addresses, amounts and transaction hashes are visible to anyone and cannot be changed or deleted, by us or by anyone else. Deletion requests apply to our own records, not to the blockchain.
05Who we share it with
We share personal data only with the providers we need to run the Service, and only what each of them needs:
- Telegram, which delivers contact form messages to our team;
- our hosting and infrastructure providers;
- the blockchain node services we use to read the network and send transactions;
- authorities, when the law requires it.
If SmartPayPro is merged or sold, the data may pass to the new owner, who must keep following this Policy.
06International transfers
Our providers may process data in a country other than yours. When that happens, we rely on the safeguards the applicable law requires, such as standard contractual clauses.
07How long we keep it
- Contact requests: until we have replied and the conversation has ended, unless you become a customer.
- Account and transaction records: while your account is active, and then for as long as accounting, tax and anti-money-laundering laws require.
- Technical logs: for a short period, to investigate errors and security incidents.
08Cookies
Our website doesn't use advertising or analytics cookies and doesn't track you across other sites. Fonts are served from our own domain. We read your browser's language setting only to open the page in your language.
If that changes, we will update this Policy and ask for your consent where the law requires it.
09Your rights
Depending on where you live, for example under the GDPR in the European Union or the LGPD in Brazil, you can ask us to:
- confirm whether we process your data and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, or restrict or object to how we use it;
- send your data to another provider;
- withdraw your consent, where we rely on it.
To make a request, write to us through the contact form. We may need to confirm your identity first. If your data reached us through one of our customers, for example as one of their players, we will pass your request to that customer, since they decide how the data is used. You can also complain to your local data protection authority.
10Security
API requests and webhooks are signed with HMAC-SHA256, and our logs leave out API keys and signatures. No system is fully secure. If a breach affects your data, we will notify you and the authorities as the law requires.
11Children
The Service is for businesses. It is not directed at children, and we don't knowingly collect their data.
12Changes to this Policy
We may update this Policy. The date at the top of this page shows the current version, and we will notify customers of material changes.