This Privacy Policy explains how Bitoshi International LLC (“Bitoshi”) collects, uses, and shares information when you use our platform, websites, dashboard, and API (the “Service”). We aim to collect only what we need to run the Service.
1. Information we collect
- Account data — your email address, hashed password, and business/merchant details you provide.
- Wallet addresses — the public blockchain address(es) you add for settlement. We never collect or store private keys or seed phrases.
- Payment metadata — amounts, currencies, status, timestamps, and on-chain transaction references for payments you process. Card details are handled by our payment providers, not by Bitoshi.
- Usage and device data — logs, IP address, and basic analytics needed for security and reliability.
2. How we use information
- To provide, secure, and improve the Service.
- To process and reconcile payments and show them in your dashboard.
- To send transactional email (account verification, password reset, receipts, service notices).
- To comply with legal obligations and prevent fraud and abuse.
3. Legal bases (where GDPR applies)
We process personal data to perform our contract with you, to comply with legal obligations, for our legitimate interests in operating and securing the Service, and with your consent where required.
4. Sharing and third parties
We share data with service providers strictly to run the Service, including:
- PayGate — payment processing and on-ramp conversion.
- SMTP2GO — transactional email delivery.
- Hosting and DNS providers (e.g., our server host and Cloudflare) — to serve the Service.
We do not sell your personal data. Blockchain settlement is inherently public: on-chain transactions and wallet addresses are visible on public networks.
5. Data retention
We keep account and payment records for as long as your account is active and as needed to comply with legal, tax, and accounting requirements, after which we delete or anonymize them.
6. Security
We use industry-standard measures including password hashing (argon2), encrypted transport (TLS), and access controls. No system is perfectly secure; you are responsible for the security of your wallet and account credentials.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@bitoshi.org.
8. Cookies
We use only the cookies necessary to operate the Service (such as your login session). We do not use non-essential tracking cookies without consent where required.
9. International transfers
Your data may be processed in countries other than yours. Where required, we use appropriate safeguards for such transfers.
10. Data controller, changes & contact
The data controller is Bitoshi International LLC, registered office: 82013 Gabriel Trafficway, Belize District, Belize (company no. 255-136-299). We may update this policy; material changes will be posted here with a new date. Contact us at privacy@bitoshi.org.
This document does not constitute legal advice; have it reviewed by qualified counsel before relying on it.