Privacy Policy

1. Who We Are

Electrum-IS is an independent self-custody wallet project focused on providing free, real-time AML screening for incoming cryptocurrency transfers. This Privacy Policy describes how we process your personal data under the EU General Data Protection Regulation (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

2. Data We Collect

• Beta Application Data: Name, email address, and intended use-case when applying for early access.
• AML Scan Metadata: Sender addresses (public blockchain data), risk scores, data sources queried, and timestamps — linked to a session ID, never to your identity or private keys. Anonymised within 90 days.
• Wallet & Key Data: Never collected. Private keys and seed phrases are generated and stored exclusively on your device.
• Technical Data: IP address, browser/app version, and OS type for access logging and security monitoring.
• Communications: Emails and messages you send to us.

3. How We Use It

• To evaluate beta applications and manage programme participation.
• To operate and improve the AML screening engine and risk models.
• To communicate product updates, beta access decisions, and support.
• To detect and prevent abuse and security threats.
• To comply with applicable law.

4. Legal Basis (GDPR)

• Consent — programme enrolment and communications.
• Legitimate interests — security, fraud prevention, engine improvement.
• Legal obligation — applicable regulatory requirements.

5. Sharing & Transfers

We do not sell your personal data. Data is processed within the EU/EEA. No transfer outside the EEA takes place without adequate GDPR protections in place.

6. Your Rights (EU GDPR)

You hold rights of access, rectification, erasure, restriction, portability, and objection. You may lodge a complaint with the relevant national data protection authority.

California residents (CCPA/CPRA): You have rights to know, delete, correct, and opt out of sale. We do not sell personal information.

Contact: privacy@elctrum-is.com

7. Retention

• Beta application and participant data: programme duration + 18 months.
• AML scan metadata (anonymised): 90 days.
• Technical access logs: 30 days.
• Communications: 2 years.

8. Security

TLS 1.3 in transit. Access controls limit data processing to authorised team members only. In the event of a personal data breach we will notify affected individuals and the relevant supervisory authority as required by GDPR Article 33.

9. Cookies

Strictly necessary session cookies only. A cookie banner is displayed on first visit. We use no analytics, advertising, or tracking cookies.

10. Children

Electrum-IS is not directed at persons under 18. We do not knowingly collect data from minors.

11. Changes

Material changes will be communicated to active programme participants at least 30 days in advance.

12. Contact