Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Business name
• Phone number (optional)
• Billing information (processed by Stripe)

1.2 Payment and Transaction Data

We collect information about Bitcoin payments:

• Lightning invoices and payment hashes
• Payment amounts and status
• Invoice details

1.3 Technical Data

We automatically collect:

• API usage logs
• Device information
• IP address
• Performance data

1.4 Information We Do NOT Collect

2. How We Use Your Information

2.1 Provide the Service

We use your data to:

• Create and maintain your account
• Generate Bitcoin addresses
• Monitor payments and confirmations
• Send payment notifications
• Provide dashboard and reporting
• Process subscriptions
• Provide customer support

2.2 Improve the Service

• Analyze usage patterns
• Fix bugs and improve features
• Develop new features
• Conduct analytics

2.3 Communicate

We may send you:

• Service updates
• Payment confirmations
• Security alerts
• Customer support responses
• Marketing (you can opt out)

3. How We Share Your Information

3.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information.

3.2 Service Providers

We share information with third parties who help operate the Service:

• Stripe: Payment processing
• Email Provider: Transactional emails
• Hosting: Server infrastructure
• Analytics: Usage analytics (if implemented)

These providers are contractually obligated to protect your data.

3.3 Lightning Network Data

3.4 Legal Requirements

We may disclose information if required by:

• Court orders or subpoenas
• Legal process
• Fraud prevention
• Protecting our rights

4. Data Security

4.1 Security Measures

We implement reasonable security including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest
• Access controls
• Regular security audits
• API token security

4.2 Your Responsibility

You must:

• Keep your password secure
• Protect your API tokens
• Enable two-factor authentication
• Not share account credentials

5. Data Retention

How long we keep data:

6. Your Rights

6.1 Access and Portability

You can:

• Access your personal information
• Request a copy of your data
• Export your data

6.2 Correction and Updates

You can:

• Update account information
• Correct inaccurate data
• Request corrections

6.3 Deletion

You can request deletion of your data (subject to legal retention).

6.4 Marketing Opt-Out

You can:

• Click "unsubscribe" in emails
• Update preferences in dashboard
• Contact support

Note: You cannot opt out of essential service communications.

7. GDPR Rights (EU Users)

If you are in the European Economic Area, you have additional rights:

7.1 Your GDPR Rights

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge complaint with supervisory authority

7.2 Exercising Rights

Contact us at privacy@satsrail.com - We will respond within 30 days.

8. CCPA Rights (California Users)

California residents have rights under CCPA:

8.1 Your CCPA Rights

• Right to Know: What information we collect
• Right to Delete: Request deletion
• Right to Opt-Out: We don't sell data
• Right to Non-Discrimination: No penalties for exercising rights

8.2 Exercising Rights

Contact us at privacy@satsrail.com - We will respond within 45 days.

9. Cookies

Essential Cookies

• Session management
• Authentication
• Security features

Functional Cookies

• Preferences and settings
• Dashboard functionality

You can control cookies through browser settings. Disabling essential cookies may affect functionality.

10. Children's Privacy

SatsRail is not intended for individuals under 18. We do not knowingly collect information from children.

11. International Transfers

Your data may be stored and processed in the United States and other countries. By using the Service, you consent to international data transfers.

12. Merchant Responsibilities

13. Updates to Policy

We may update this Privacy Policy. Changes are effective upon posting. We'll notify you of material changes via email.

14. Contact Us

For privacy questions or to exercise your rights:

• Email: privacy@satsrail.com
• Data Protection: dpo@satsrail.com

Response Times:

• General inquiries: 5 business days
• GDPR requests: 30 days
• CCPA requests: 45 days