Privacy Policy

Introduction

Welcome to CryptoComply ("we," "our," or "us"), a service provided by Canaria Consulting, LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Web3 compliance software solution and related services (collectively, the "Service").

CryptoComply acts as a data controller for the personal information it collects directly from users and as a data processor for information our customers input into the Service for compliance purposes. Customers are responsible for ensuring they have the right to provide such data under applicable law.

"Personal Data" or "personal information" refers to any information that relates to an identified or identifiable individual, including as defined under applicable data protection laws such as the GDPR and CCPA/CPRA.

Information We Collect

Information You Provide

• Account Information: Business contact details, user credentials, and profile information
• Business Information: Company details, compliance documentation, and transaction records
• User Content: Information you input into our platform for compliance purposes

Information Automatically Collected

• Technical Data: IP addresses, browser type, device information
• Usage Data: Feature interaction, access logs, and platform analytics
• Blockchain Data: Public blockchain addresses and transaction data processed through our service

How We Use Your Information

• Service Provision: To provide, operate, and maintain the Service, including user authentication, account setup, and customer support.
• Compliance Screening: To screen names, wallet addresses, and other identifiers against watchlists, public blockchain records, and adverse media databases.
• Ongoing Monitoring: To continuously monitor submitted or linked wallet addresses and party names for updates.
• Risk Analysis: To assess risk levels associated with parties and transactions based on compliance data, behavior, or public reputation.
• Fraud Detection & Security: To detect, prevent, and investigate security incidents, fraud, and unauthorized access or misuse of the Service.
• Product Improvement: To improve our Service, develop new features, and understand usage trends through aggregated analytics.
• Legal & Regulatory Compliance: To comply with applicable laws, regulations, and legal obligations.
• Communications: To contact you with Service-related communications, account updates, or administrative notices.

Information Sharing and Disclosure

We may share your information with:

• Service providers who assist in operating our platform
• Law enforcement or regulatory bodies when legally required
• Business partners with your explicit consent
• Professional advisors (attorneys, accountants, auditors)

We do not sell your personal information to third parties.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Secure data backup and recovery procedures

Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this Privacy Policy. Retention periods vary:

• Account and profile information: Retained until the account is deleted or inactive for 3 years
• Compliance-related documentation: Retained for up to 7 years or as required by law
• Technical and usage data: Retained for 12 months unless otherwise required

Cookies and Tracking Technologies

We may use cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our Service. You can manage cookie preferences through your browser settings or opt-out tools provided in your region.

Your Rights and Choices

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data (subject to legal requirements)
• Opt-out of marketing communications
• Request exporting your data in a structured format

International Data Transfers

We may transfer your information to servers located outside your country of residence. We rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers outside the EEA and UK.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on our website, sending an email to registered users, or displaying a notice within our Service.

Contact Us

Canaria Consulting, LLC
Email: privacy@cryptocomply.xyz

Additional Information for Specific Jurisdictions

California Residents

If you are a California resident and the processing of Personal Data about you is subject to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have additional rights including:

• Right to Know: Request disclosure of Personal Data we have collected, its sources, purposes, and third parties we share it with.
• Right to Correction or Deletion: Request correction of inaccurate data or deletion of your Personal Data.
• Right to Opt-Out: Opt out of the sale or sharing of personal information by emailing privacy@cryptocomply.xyz.
• Right to Limit Use: Limit our use of sensitive Personal Data to only what is necessary to provide our services.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise any of these rights, email privacy@cryptocomply.xyz. We will respond to one request per California resident each year.

European Economic Area and UK Residents

If you are located in the European Union or United Kingdom, the processing of your Personal Data is subject to additional rights under GDPR and UK GDPR. We process your data based on consent, contract performance, legal obligations, or legitimate business interests.

Your additional rights include:

• Access and receive a copy of your Personal Data in a structured, machine-readable format
• Object to or restrict the processing of your Personal Data
• Request erasure of your Personal Data ("right to be forgotten")
• Withdraw consent at any time for future processing
• Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact our Data Protection Officer at privacy@cryptocomply.xyz.