Privacy & Data Protection Policy

1. Information We Collect

• Order & Delivery Details: Full name, email address, and phone number for invoice generation and tokenized course link delivery.
• OTC Settlement Data: Public destination blockchain wallet addresses (TRC20/BEP20/ERC20), order amounts, and banking UTR reference identifiers.
• Technical Diagnostics: IP address, device user agent, and timestamp for anti-fraud telemetry and rate-limiting protection.

2. Zero-Password Security Model

Unlike legacy web applications, we do not require users to create or store plaintext passwords or password hashes for course access. Access is managed via HMAC-SHA256 cryptographically signed tokens. This eliminates risk associated with credential stuffing, password leaks, or database breaches.

3. Third-Party Processors & Gateways

Payment processing for Indian Rupees is secured via PCI-DSS Level 1 certified gateways including Razorpay and UPI Banking Switchboards. We do not store credit card numbers, CVVs, or net banking passwords on our servers.

4. Cookies & Session Telemetry

We use essential cookies strictly for maintaining active desk sessions and theme preferences. We do not sell, rent, or monetize your browsing history with third-party advertising trackers or data brokers.

5. Data Rights & Grievance Contact

You have the right to request a copy of your transaction logs, invoice records, or request deletion of personal identifiers. To exercise these rights, please contact our Data Protection Officer at privacy@cryptokhalil.local.