Privacy policy

How the operator of Crypto Cash handles your personal data. Written to describe what the system actually does, not what is customary.

What we hold

• Account — your email address and a hashed password. We never store your password itself.
• Security — session records with the IP address and browser user-agent used to sign in, so you can review and revoke sessions. If you enable two-factor authentication we store its seed, encrypted.
• Orders — what you instructed, when, the amount, the estimated price, our fee, the status, and any transaction hash the provider reports back.
• Wallet addresses — the delivery addresses you save, with any label you give them.
• Krypto AI — the messages you send to the assistant and its replies.
• Audit trail — a record of consequential actions taken on the platform, including by our own staff.

We do not hold your card or bank details. Those are entered on the payment provider’s own screens and never reach us.

Identity documents

Identity verification is carried out by our verification and payment partners. Documents and selfies you submit go to them under their own privacy policies. We receive the outcome — verified, pending or refused — and a reference, not the underlying documents.

Who your data is shared with

• The on-ramp provider (none connected at present) — your email and order details, so it can take the payment, run its checks and deliver the asset. It is a separate controller of that data.
• Google — Krypto AI runs on Google’s Gemini models. When you use the assistant, your message and the account information needed to answer it are sent to Google for processing. Wallet addresses are truncated before being sent. Do not put anything in the assistant you would not want processed by a third party.
• Infrastructure — our hosting provider, and market data providers for price feeds. Price feeds receive no personal data.
• Authorities — where we are legally obliged to disclose.

We do not sell your data, and we do not use it for advertising.

Why we are allowed to hold it

• To perform our contract with you — running your account and recording your orders.
• Legal obligation — anti-money-laundering and financial recordkeeping rules.
• Legitimate interests — securing accounts, preventing fraud, and reviewing orders at the desk.

How long we keep it

Transaction and audit records are retained for the period financial recordkeeping law requires, which is typically five to seven years after an account closes, and this survives a deletion request. Session records are short-lived. Krypto AI transcripts are kept so the desk can review what the assistant told you, and are deleted with your account except where a record is needed for a specific dispute.

[To be completed by counsel: exact retention periods for the jurisdictions served.]

Your rights

Depending on where you live, you may have the right to access, correct, export or erase your data, and to object to some processing. Write to joe@searchtuners.com. We may need to verify who you are first. Erasure does not extend to records we are legally required to retain.

Security

Traffic is encrypted in transit. Passwords are hashed with scrypt. Two-factor seeds and provider credentials are encrypted at rest with AES-256-GCM. Sessions can be revoked from your security page. No system is perfectly secure; enable two-factor authentication and use a password unique to this site.

Cookies

We set one cookie, to keep you signed in. It is essential to the service and is not used for tracking or analytics. There are no third-party advertising cookies.

Children

The service is not for anyone under 18, and we do not knowingly collect their data.

Changes

Material changes will be notified to your registered email address before they take effect.

Questions about any of this: joe@searchtuners.com