Privacy Policy

Last updated: 2026-09-11. This policy is written to meet the transparency requirements of the EU General Data Protection Regulation (GDPR), the Saudi Personal Data Protection Law (PDPL), and the US California Consumer Privacy Act / CPRA (CCPA).

Who controls your data

The operator has not yet configured its registered legal name, business address, and contact email for this policy (set BUSINESS_LEGAL_NAME, BUSINESS_ADDRESS, and BUSINESS_CONTACT_EMAIL). Until then, use the in-app Support form to reach us, and treat this page as incomplete for GDPR/PDPL controller-identity purposes.

What we collect

Account data: email address and a hashed password (we never store your password in plain text).
Payment-reference data: order/invoice IDs, amount, currency, and payment status from our payment processors (NOWPayments for crypto, Paddle for card). We do not receive or store your card number or wallet private keys.
Telegram data: your Telegram numeric user/chat ID, used solely to deliver and manage your VIP channel invite and to send you service messages (payment confirmations, renewal reminders, expiration notices).
Support data: the name, email, and message you submit through the Support form.
Technical data: standard server logs (IP address, timestamps, user agent) kept for security and abuse prevention.
Approximate location: on your first visit, your IP address is sent to a third-party geolocation lookup (ipapi.co) solely to detect your country so we can show exchanges available in your region. The IP is used for that one lookup and is not stored by this step; if you manually pick a region yourself, that choice is remembered instead and this lookup is skipped on later visits.

Why we process it (legal basis)

Contract performance: creating your account, processing payment, delivering VIP access.
Legitimate interest: fraud/abuse prevention, service security, and support.
Legal obligation: financial record-keeping where required by law.
Consent: any non-essential cookies or communications, which you control via the cookie banner and can withdraw at any time (see our Cookie Policy).

Who we share it with

We do not sell personal information. We disclose information only to service providers strictly needed to run Krypton: our payment processors (NOWPayments, Paddle), Telegram (Bot API, to deliver your invite link), our hosting provider (Railway), and where required by law or a valid legal request.

International transfers

Because our processors and hosting infrastructure operate internationally, your data may be processed outside your country of residence, including outside the EEA/Saudi Arabia. Where this occurs, we rely on our processors' own standard safeguards (such as EU Standard Contractual Clauses) for that transfer.

Retention

We retain account and subscription records for as long as your account is active and for a reasonable period after, to meet financial record-keeping obligations and resolve disputes. Support tickets are retained long enough to handle follow-up requests.

Your rights

Subject to applicable law (GDPR, PDPL, or CCPA/CPRA as relevant to you), you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; object to or restrict certain processing; request a portable copy of your data; and, for EU/UK/Saudi residents, lodge a complaint with your local data protection authority. California residents additionally have the right to know, delete, correct, and opt out of the sale/sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, contact us through the in-app Support form, or at the contact address above once configured. We will respond within the timeframe required by applicable law.

Children's privacy

Krypton is not directed to, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from minors.

Security

We use industry-standard measures (password hashing, rate limiting, HMAC-signed webhooks, encrypted connections) to protect your data, and we will notify affected users and, where legally required, the relevant supervisory authority without undue delay in the event of a data breach affecting your personal information.

Cookies

See our Cookie Policy for details on what we store in your browser and how to control it.

Return to Krypton