Privacy Policy

This policy explains what personal data Gatevault processes, why, and your rights.

Data we collect

• Account data: name, email, password hash, two-factor settings.
• Business data: business name, website, registration and contact details, verification documents.
• Transaction data: amounts, currencies, wallet addresses or Binance IDs, transaction hashes, timestamps, customer emails you choose to send.
• Security data: IP addresses, user agents, login history, API request logs.

Why we use it

• To provide and secure the service and process transactions with our providers.
• To meet legal obligations such as record keeping and anti-money-laundering checks.
• To detect and prevent fraud and abuse.

Sharing

We share transaction data with the payment provider that processes each transaction (Cryptomus or Binance Pay) and with authorities where legally required. We do not sell personal data.

Retention

Financial records are kept for the period required by law. Technical logs are retained for a limited time (for example, API request logs for 90 days).

Security

Data is encrypted in transit (HTTPS). API secrets are stored only as keyed hashes, sensitive settings are encrypted at rest, and access is restricted by role with audit logging.

Your rights

Depending on your jurisdiction, you may request access, correction, deletion or a copy of your data, subject to our legal retention obligations. Contact us through the Contact page.