Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us, including:

• Contact information (name, email address, company name)
• Account credentials and authentication data
• Business verification information (for KYC/AML compliance)
• Payment and billing information
• Communications you send us (support requests, inquiries)

1.2 Information Collected Automatically

• Usage data: API call logs, request metadata, timestamps, and response codes
• Device information: IP address, browser type, operating system, referrer URLs
• Transaction data: on-chain transaction hashes, wallet addresses, amounts, and settlement status
• Cookies and similar tracking technologies for session management and analytics

1.3 Information from Third Parties

• Identity verification providers for KYC/AML purposes
• Public blockchain data associated with wallet addresses you provide
• Business partners and referral sources

2. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, operate, and maintain our APIs, SDKs, and payment infrastructure
• Compliance & Regulation: To fulfill KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations under applicable law
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions and unauthorized access
• Account Management: To create and manage your account, process payments, and provide customer support
• Communication: To send service notifications, security alerts, and (with your consent) product updates
• Product Improvement: To analyze usage patterns and improve our Services
• Legal Obligations: To comply with applicable laws and respond to lawful requests from authorities

3. Legal Bases for Processing (GDPR)

For individuals in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contractual Necessity: Processing necessary to deliver our Services under our Terms of Service
• Legal Obligation: Processing required for compliance with financial regulations, including KYC/AML
• Legitimate Interests: Security monitoring, fraud prevention, and product improvement
• Consent: Marketing communications and optional analytics (where required)

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Infrastructure providers, analytics tools, and KYC/identity verification partners, under strict data processing agreements
• Legal Authorities: When required by law, court order, or to protect the rights, property, or safety of Sandingzone, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations
• With Your Consent: Any other sharing with your explicit authorization

5. Data Retention

We retain your personal data for as long as necessary to provide our Services, comply with legal obligations (including financial record-keeping requirements under US law, which may require retention for up to 7 years), resolve disputes, and enforce our agreements. Transaction records and KYC documentation may be retained longer as required by applicable financial regulations.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention obligations)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Opt-out of Sale/Sharing (CCPA): California residents have the right to opt out of the sale or sharing of their personal information (we do not sell personal data)

To exercise any of these rights, contact us at admin@sandingzone.com. We will respond within 30 days (GDPR) or 45 days (CCPA) of receipt.

7. International Data Transfers

Sandingzone is headquartered in the United States. If you access our Services from outside the US, your information may be transferred to and processed in the United States. For transfers from the EEA or UK, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission.

8. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately at admin@sandingzone.com if you suspect any unauthorized access.

9. Cookies

We use essential cookies for session management and security, and analytics cookies (with your consent) to understand how our Services are used. You may control cookie preferences through your browser settings. Disabling cookies may affect the functionality of our Services.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the “Last updated” date. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For EU/EEA residents: If you believe your data has been processed unlawfully, you have the right to lodge a complaint with your local supervisory authority.