Privacy Policy

This Privacy Policy ("Policy") describes how Fystack ("Fystack," "we," "our," or "us") collects, uses, and protects information in connection with our non-custodial digital asset wallet infrastructure software and services (collectively, the "Services").

Fystack is committed to protecting your privacy and maintaining the security of your information. This Policy explains our data practices and your rights regarding any information we may collect.

1. Information We Collect

1.1 Email Addresses

The only personal information Fystack collects directly from you is your email address, which we collect when you:

• Create an account or register for our Services
• Subscribe to our newsletter or communications
• Contact us for support or inquiries
• Participate in surveys, promotions, or events

1.2 Technical and Usage Information

We may automatically collect certain technical information when you use our Services, including:

• IP addresses and device identifiers
• Browser type and version
• Operating system information
• Usage patterns and interaction data with our Services
• Log files and diagnostic data

1.3 Information We Do Not Collect

Fystack does not collect, store, or have access to:

• Private keys or seed phrases
• Wallet balances or transaction details (except as necessary for service operation and as displayed in your dashboard)
• Personal financial information beyond what is necessary for billing
• Sensitive personal data such as government IDs, social security numbers, or biometric data (unless required by law and with your explicit consent)

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Email Addresses

• To create and manage your account
• To communicate with you about the Services, including updates, security alerts, and support messages
• To send you newsletters, marketing communications, and promotional offers (with your consent, where required)
• To respond to your inquiries and provide customer support
• To comply with legal obligations and enforce our Terms of Service

2.2 Technical and Usage Information

• To provide, maintain, and improve the Services
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues, fraud, and security vulnerabilities
• To ensure the proper functioning of our infrastructure

3. Non-Custodial Architecture and Data Minimization

Fystack provides non-custodial wallet infrastructure. This means:

• We do not have custody, control, or access to your digital assets
• We cannot initiate, approve, or reverse transactions on your behalf
• You retain full control over your cryptographic keys and assets
• We operate on a principle of data minimization, collecting only what is necessary to provide the Services

For self-hosted deployments, all data resides within infrastructure you control. For cloud deployments, cryptographic key material is distributed across multiple parties and systems, and we never possess sufficient information to independently derive private keys.

4. Information Sharing and Disclosure

Fystack does not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Services, such as hosting providers, email delivery services, and analytics platforms. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose information if required to do so by law or in response to valid legal process, including:

• Compliance with legal obligations, court orders, or government requests
• Protection of our rights, property, or safety, or that of others
• Investigation and prevention of fraud, security issues, or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.

5. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Secure infrastructure and network protections

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your email address and related information for as long as necessary to:

• Provide the Services and maintain your account
• Comply with legal obligations, resolve disputes, and enforce our agreements
• Fulfill the purposes described in this Policy

If you close your account or request deletion of your information, we will delete or anonymize your data within a reasonable timeframe, unless retention is required by law.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information, subject to legal and operational requirements
• Opt-Out: Unsubscribe from marketing communications at any time by following the unsubscribe instructions in our emails
• Data Portability: Request a copy of your information in a structured, machine-readable format
• Restriction: Request restriction of processing of your information in certain circumstances

To exercise these rights, please contact us at privacy@fystack.io.

8. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to collect usage information and improve your experience with our Services. You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of certain features.

We may use analytics services such as Google Analytics to understand how users interact with our Services. These services may collect information about your use of our Services and other websites.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your jurisdiction. By using our Services, you consent to such transfers, and we will take appropriate measures to ensure your information is protected in accordance with this Privacy Policy.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of material changes by posting the updated Policy on our website and updating the "Last updated" date. Your continued use of the Services after such changes constitutes acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@fystack.io

For legal inquiries: legal@fystack.io