Privacy Policy

STAROHM (“we,” “our,” “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (starohm.xyz), mobile app, decentralized application (dapp), or interact with our services. Please read this Privacy Policy carefully. 

By using our website, app, dapp, or services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use our services.

1. Information We Collect

We collect information from and about you in various ways, including:

1.1. Personal Data You Provide

When you engage with our services, such as creating an account or contacting us, we may collect information directly from you, including but not limited to:

• Identity Data: Full name, date of birth, gender, and other identifiers.

• Contact Data: Email address, mobile number, mailing address.

• Financial Data: Payment method details (though we do not directly collect credit card or banking information; instead, this data is processed via secure third-party payment processors).

• Cryptocurrency Wallet Data: Public wallet addresses or related blockchain information needed to facilitate decentralized transactions.

• Transaction Data: Records of transactions, including payments made and received, interactions with smart contracts, and other blockchain-based activity.

• Communications Data: Information you provide when contacting us, such as through customer service inquiries, feedback, or any other form of communication.

1.2. Automatically Collected Data

Certain information is collected automatically when you use our services, including:

• Usage Data: Information on how you interact with our website, app, and dapp (e.g., pages viewed, time spent, app features used, and clicks on specific links).

• Technical Data: Data about your device and internet connection, such as IP address, browser type, operating system, device type, and unique device identifiers.

• Location Data: When using location-based services or features, we may collect geolocation data, depending on your device settings.

• Log Data: Records of access times, browser types, and other interaction information logged by our servers or application environments.

1.3. Cookies and Tracking Technologies

We use cookies, beacons, tags, pixels, and other similar technologies to collect and store information when you use our services. These may include:

• Session Cookies: Used to manage your session and ensure smooth operation.

• Persistent Cookies: Remain on your device for a specified period to remember your preferences.

• Analytics Cookies: Provide us with insights into how users interact with our services, helping us improve functionality.

• Advertising Cookies: Track your interaction with advertisements, ensuring more relevant advertising content.

You may disable cookies through your browser settings, but doing so may limit certain features or functions.

2. How We Use Your Information

We use the information we collect to:

• Provide and Improve Services: Ensure smooth access to our website, app, and dapp, enhance functionality, and introduce new features.

• Processing Transactions: Facilitate both fiat and cryptocurrency transactions, ensuring secure payments.

• Communication: Respond to inquiries, provide customer support, send service-related notifications (e.g., updates, security alerts), and inform you of changes to our services.

• Compliance: Fulfill legal obligations, such as anti-money laundering (AML) and know-your-customer (KYC) requirements, as well as any other relevant financial regulations.

• Marketing and Personalization: Provide personalized recommendations, marketing content, and promotions, based on your interactions and preferences. Where required, we will obtain your consent before sending marketing communications.

• Analytics and Research: Understand usage trends and user behavior through statistical analysis, enabling us to improve user experience and address operational issues.

• Security: Prevent unauthorized access, fraud, and other security breaches. This includes monitoring suspicious activity and investigating violations of our terms or legal requirements.

3. Legal Bases for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), we process your personal data based on specific legal grounds:

• Consent: Where you have given explicit consent (e.g., for marketing communications).

• Contractual Necessity: When processing is necessary for the performance of a contract with you (e.g., processing payments, delivering services).

• Legal Obligations: Where processing is required to comply with laws (e.g., AML/KYC regulations).

• Legitimate Interests: When processing is necessary for our legitimate interests, and these interests do not override your rights and freedoms (e.g., security measures or operational improvements).

4. Data Sharing and Disclosure

We do not sell, lease, or trade your personal data. However, we may share information in the following situations:

4.1. With Service Providers

We may share your data with trusted third-party service providers who perform essential functions on our behalf, such as:

• Cloud hosting and storage providers.

• Payment processors.

• Customer support platforms.

• Analytics service providers. These third parties are contractually obligated to maintain the confidentiality and security of your information.

4.2. With Legal Authorities

We may disclose your data to law enforcement agencies, regulatory bodies, or other authorities if required to comply with legal obligations, enforce our terms of service, or protect the rights, safety, and property of our users or others.

4.3. In Business Transactions

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction. We will notify you if such a transfer affects your personal information.

4.4. Blockchain and Publicly Visible Data

Blockchain technology inherently operates as an open ledger. Transactions, wallet addresses, and related activities conducted on our dapp are publicly visible and cannot be removed or altered. We are not responsible for third-party access to this publicly available data.

5. Data Security

We employ industry-standard security measures to protect your information from unauthorized access, use, disclosure, or destruction. These include encryption, access control, and secure server infrastructure. However, no data transmission over the internet or electronic storage is 100% secure. You acknowledge that the security of your data cannot be fully guaranteed.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and enforce our agreements. In some cases, we may retain data for longer if required for legal or security reasons.

7. Your Rights and Choices

Depending on your location, you may have certain rights concerning your personal data. These include:

• Right of Access: Request a copy of your personal data and information on how it is processed.

• Right to Rectification: Request correction of inaccurate or incomplete personal data.

• Right to Erasure: Request deletion of your personal data, subject to legal or regulatory obligations.

• Right to Object: Object to the processing of your data for certain purposes, such as direct marketing.

• Right to Restrict Processing: Request limitation of how your data is processed in certain circumstances.

• Right to Data Portability: Request that your data be transferred to another service provider in a structured, commonly used, and machine-readable format.

To exercise any of these rights, contact us. We will respond to your request as required by applicable law.

8. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including countries that may not offer the same level of data protection. In such cases, we will implement appropriate safeguards, such as data transfer agreements based on standard contractual clauses approved by relevant regulatory authorities, to ensure your information remains protected.

9. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such information, we will take steps to delete it as soon as possible.

10. Third-Party Links and Services

Our services may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any external sites you interact with.

11. Changes to This Privacy Policy

We may modify or update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on our website, app, or dapp, with an updated effective date. Continued use of our services after changes become effective constitutes your acceptance of the revised policy.

12. English Version is Final

This Privacy Policy may be translated into other languages for convenience. However, in the event of any inconsistencies or discrepancies between the translations, the English version will take precedence and shall be considered the final, binding version.

13. Contact Us

If you have any questions about this Privacy Policy or how your information is handled, please contact us.