We never store the IP addresses. After the db hacks that other wallets faced,
we don't store any information ourselves that will reveal personal information about the user. You can find our latest privacy policy here -
https://www.cypherock.com/privacy You don't store it yourself, but does that mean that someone else might store it for you?
I took a look at your Privacy Policy and here are a few interesting points:
Depending on the purposes stated above, we may collect the following types of information:
- Information that you provide us with: When you purchase a product or service from Cypherock, we collect, as part of the buying and selling process, the personal information you submit during your purchase, including:
Your surname and first name;
Your contact information such as your address, email and telephone numbers;
Your financial information such as your credit/debit card number.
- Information resulting from your activity on our Website: We receive and store certain types of information every time you interact with us. For example, like many websites, we use Cookies and we obtain certain types of information when your Web browser accesses our Websites and other content provided by or on behalf of Cypherock on other websites. We may therefore also collect the following Data from you:
IP address (automatically collected);
Web browser type and version (automatically collected);
Operating system (automatically collected);
Your browsing history to and from the Website;
You don't mention in your Privacy Policy for how long the data is stored and after how long it gets deleted or anonymized:
RETENTION OF PERSONAL DATA
7. The retention period of Personal Data processed by Cypherock may vary depending on common practice, the documents considered in accordance with the legal obligations and the applicable limitation rules.
With regard to credit card data, Cypherock uses payment services providers that manage transaction data in accordance with strict security rules applicable to online payments via encryption methods.
8. All Personal Data is securely stored on our servers in accordance with industry standards and the GDPR. For more details on the security measures implemented, please refer to the section “Security” below.
Personal data can also be shared with 3rd-parties who might collect it:
10. To allow access to certain payment methods, we use third party providers that may also collect Personal Data. In this case, such service providers are responsible for the collection and processing of Data for the provision of the service. Please refer, if necessary, to their own privacy policy.
To be fair, you do mention that the data used by 3rd-parties is only in connection to the services you provide:
11. All Personal Data used by these third parties is used solely for the purposes of the services provided at our request. Any use for other purposes is strictly prohibited.
How much time needs to pass before a customer can request to have all its data removed from your servers and offline copies (if they exist)? What does the local law require you do in terms of how long the data needs to be stored?
15. You have the right to request access to your Personal Data, their rectification or erasure, as well as the right to request the restriction of the processing or to object to the processing.
You also have the right to withdraw your consent at any time, in particular to have your data no longer processed for the purpose of marketing by electronic means.
https://www.cypherock.com/privacy
