Privacy Policy
Effective date: [EFFECTIVE DATE]
This policy explains what data AML Checker stores, why, and what rights you have. We keep data to the minimum needed to run the Service.
1. Who we are
The data controller is [COMPANY NAME], registered in [JURISDICTION] under number [REGISTRATION NUMBER], [COMPANY ADDRESS] ("we"). Privacy contact: [PRIVACY EMAIL]. Data Protection Officer: not appointed.
2. What we store
| Data | Why |
|---|---|
| Telegram user ID (a technical number, not your name or phone) | To link your Balance to you in the bot |
| Account ID and Balance of Checks | To provide the Checks you paid for |
| Payment records: amount, currency, date, status, Stripe payment reference, Account ID entered | Accounting, crediting Checks, refunds |
| IP address (website only) | Security and limiting the Free Check to one per visitor |
| Messages you send to support | To answer you |
3. What we do not collect or store
- Your name, email, phone number or identity documents. We do not require identity verification.
- Your card details. Payments are processed by Stripe; we never see your full card number. During payment Stripe may ask for your email and billing country and processes them under its own privacy policy.
- Private keys, seed phrases or wallet passwords.
- A history of the wallet addresses you check. An address is sent to our analytics provider only to produce the Result and is not saved in your account.
Results relate to public blockchain addresses, not to you personally.
4. Do you have to provide data?
The Telegram user ID is needed for the bot to work, and a wallet address is needed to run a Check. Without them we cannot provide the Service. Everything else you share with support is voluntary.
5. Legal basis (where GDPR or similar laws apply)
| Purpose | Legal basis |
|---|---|
| Providing Checks you requested and paid for | Performance of a contract |
| Keeping payment and accounting records; complying with sanctions and anti-money-laundering laws | Legal obligation |
| Security, preventing fraud and abuse of the Free Check | Legitimate interests |
We do not rely on consent for any of the processing above. If we ever ask for your consent for something else, you can withdraw it at any time.
6. Automated processing
The risk score is calculated automatically from blockchain and analytics data about the wallet address you submit. We do not use it to make decisions about you that have legal or similarly significant effects. Our only automated limit on you is the one Free Check per visitor.
7. Who we share data with
We share only what each provider needs:
- Stripe — payment processing.
- Blockchain analytics provider — only the wallet address and network you check, to produce the Result. We do not send your name, Telegram ID or payment data.
- Telegram — delivering bot messages.
- Hosting and database providers (for example, Railway and MongoDB Atlas) — storing and running the Service.
- Live chat provider (for example, tawk.to) — support chat on the website.
- Authorities — only when required by law, for example in response to a lawful request or where we suspect money laundering.
We do not sell your personal data and do not share it for advertising.
8. International transfers
Our providers may process data outside your country, including in the United States and the European Union. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
9. How long we keep data
| Data | How long |
|---|---|
| Telegram user ID, Account ID and Balance | While you use the Service, and up to 12 months after your last activity |
| Payment records | As long as accounting and tax law requires, typically [RECORD RETENTION PERIOD, e.g. 5 years] |
| IP addresses for the Free Check and security | Up to 90 days |
| Support messages | Up to 24 months |
10. Your rights
Depending on where you live, you can ask us to:
- give you a copy of your data;
- correct inaccurate data;
- delete your data (we may keep records the law requires us to keep);
- restrict or object to processing;
- send your data to you or another provider in a common format.
To make a request, write to [PRIVACY EMAIL] and include your Account ID. We answer within 30 days. You also have the right to complain to the data protection authority in your country.
California residents: we do not sell or share personal information as defined by the CCPA, and you have the right to know, delete and correct your data as described above.
11. Security
We use encrypted connections (HTTPS), restrict access to data to people who need it, keep passwords and keys outside our code, and keep databases closed to public access. No system is completely secure, but we work to protect your data and will inform you and the authorities of a data breach where the law requires.
12. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from children.
13. Cookies
The website uses only cookies needed for it to work, such as a session cookie for the accounting console, and cookies set by the live chat provider. We do not use advertising or tracking cookies.
14. Changes
We will publish any changes on this page with a new effective date and notify you in the bot about material changes.
15. Contact
[COMPANY NAME], [COMPANY ADDRESS] · Privacy: [PRIVACY EMAIL] · Support: [SUPPORT EMAIL]