Privacy Policy

1. Data we process

Merchant accounts: business name, email address, a salted password hash, Google account identifier if you use Google sign-in, session records, API key records (only hashes of secrets), webhook endpoints, registered public wallet addresses, invoices, optional customer details you enter, support messages and the audit trail of record changes.

Terms acceptance records: account identifier, acceptance time, terms version and hash, the network address and forwarding headers of the request, and the browser user agent.

Public blockchain data: sender and recipient addresses, amounts, transaction hashes and timestamps of USDT (TRC20) transfers to registered addresses. This data is already public on the TRON blockchain.

Payers and visitors: checkout pages keep an anonymous payer token in the browser to bind a payment attempt; support chat and contact forms store the name, email and messages you submit; complaint forms store the details and evidence you provide. Network addresses are used briefly for rate limiting and abuse prevention.

2. Why we use it

To provide the software you request, secure accounts, match blockchain transfers to invoices, deliver notifications and exports, answer support requests, moderate complaints, prevent abuse, keep evidence of contract acceptance and meet legal obligations.

3. Service providers

We use providers only as needed: blockchain node APIs (for example TronGrid) receive the public addresses we monitor; Cloudflare Turnstile receives security-check data from forms; Google receives sign-in requests if you use Google sign-in; our email provider receives addresses and message contents for account emails; hosting providers store our databases. Webhook payloads go only to the endpoints that merchants configure.

We do not sell personal data and do not use it for third-party advertising. We disclose data to authorities when the law requires it.

4. Cookies and browser storage

smg_session (HttpOnly) keeps you signed in; smg_lang stores your language. Browser local storage keeps support-chat tokens, remembered contact details you chose to save, and checkout payer tokens. We do not use advertising cookies.

5. Retention

Accounting, invoice, transaction, audit and terms acceptance records are kept for as long as the account exists and afterwards for as long as needed for legal, tax and dispute purposes. Sessions and email links expire automatically. Support and complaint records are kept while needed to handle and evidence the matter.

6. Your choices and rights

You can update your business name in the dashboard and export your ledger at any time. Depending on the law that applies to you, you may request access to, correction of or deletion of personal data, or object to processing. Contact support; some records must be kept by law or to protect others.

Data may be processed in countries other than yours, including the United Arab Emirates and the countries where our providers operate.

7. Security

Security measures are described on the Security page. No system is perfectly secure; tell us immediately if you suspect unauthorised access.

Contact

Abuse, security and lawful authority requests: abuse@smetaledger.io. General support: contact form.