Privacy Policy

chcks.co ("we", "our", "us") operates a subscription-based crypto point-of-sale platform for merchants. This policy explains what data we collect, why we collect it, how long we keep it, and the rights you have over it.

We are committed to full compliance with the EU General Data Protection Regulation (GDPR) and handle personal data with care and transparency.

chcks.co acts as the data controller for merchant account and platform data. Each merchant additionally acts as an independent data controller for customer-facing transaction data they collect through the platform.

Contact: [email protected]

3.1 Account & Merchant Data

• Business name, email address, and account credentials
• Merchant payout wallet address (e.g. USDT TRC-20/SOL, TON, BTC, etc., provided voluntarily by the merchant for settlements)
• Business type, slug, and display settings
• API keys (stored as hashed values)
• Subscription plan and billing status

3.2 Transaction & Order Data

• Order items, quantities, and prices
• Payment amounts, settled cryptocurrency, and public blockchain transaction hashes
• External routing references (e.g., automated swap identifiers where applicable)
• Payment timestamps and expiry status

3.3 Technical & Usage Data

When you or your customers visit pages on chcks.co, we automatically log:

• IP address
• Browser and operating system (from User-Agent header)
• Preferred language (from Accept-Language header)
• Page visited and timestamp
• Referring URL (if any)

This data is used solely for security monitoring, abuse prevention, and platform diagnostics. It is not sold or shared with third parties and is not used for advertising.

3.4 Authentication Data

• Hashed passwords (bcrypt — plaintext never stored)
• Passkey credentials (WebAuthn, stored per device)
• Session tokens (short-lived, rotated on each login)

• Contract performance (Art. 6(1)(b)): Operating your merchant account, processing orders and payments.
• Legitimate interests (Art. 6(1)(f)): Security logging, fraud prevention, abuse detection.
• Legal obligation (Art. 6(1)(c)): Financial record-keeping and tax compliance.
• Consent (Art. 6(1)(a)): Non-essential cookies or analytics, where applicable (see §8).

chcks.co charges a flat subscription fee — €15 / month or €160 / year. Payments are made in USDT on the TON network directly to our platform wallet. We do not use third-party payment processors or store card data.

Subscription status, payment references, and period dates are stored in our database linked to your merchant account.

• Transaction / order data: Retained for 90 days by default. Adjustable by the merchant in dashboard settings.
• Request logs: Retained for 90 days, then automatically purged.
• Account data: Retained for the duration of the subscription and up to 30 days after account closure.
• Blockchain records: Transaction hashes are permanently recorded on the TON blockchain and cannot be deleted — this is outside our control.

Merchants can export all their data and request full deletion at any time via Dashboard → Settings → Privacy.

Under the GDPR you have the right to:

• Access (Art. 15): Request a copy of all personal data we hold about you.
• Rectification (Art. 16): Correct inaccurate or incomplete data.
• Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Portability (Art. 20): Export your data in machine-readable format (JSON / CSV) from the dashboard.
• Restriction (Art. 18): Restrict processing in certain circumstances.
• Object (Art. 21): Object to processing based on legitimate interests.
• Lodge a complaint: Contact your national data protection authority (e.g. DPA in your EU member state).

To exercise any right, email [email protected]. We respond within 30 days.

We use only strictly necessary cookies:

• Session cookie: Keeps you logged in during your browser session.
• Admin cookie: Short-lived token for the admin panel.
• Consent cookie: Remembers your cookie preference (1 year).

We do not use analytics cookies, tracking pixels, or advertising cookies. See our Cookie Policy for full details.

We do not sell, rent, or share your personal data with third parties, except:

• TON blockchain: Transaction memos and wallet addresses are published on-chain as part of the payment protocol.
• Hosting infrastructure: Our servers are hosted in the EU. No data is transferred outside the EEA.
• Legal requirements: If required by law or a court order.

• All data is transmitted over TLS (HTTPS).
• Sensitive fields are encrypted at rest using AES-256-GCM.
• Passwords are hashed with bcrypt (never stored in plaintext).
• Non-custodial design — we never hold or have access to your wallet funds.
• All blockchain receipts are cryptographically signed and publicly verifiable.

chcks.co is designed to comply with the EU Markets in Crypto-Assets Regulation (MiCA):

• Non-custodial — merchants control their own wallets at all times.
• No KYC required — wallet-address-based verification only.
• All transactions are publicly verifiable on the TON blockchain.
• Full transaction history export is available on demand.

We may update this policy to reflect changes in the platform or legal requirements. Material changes will be communicated by email to registered merchants at least 14 days before taking effect. Continued use of the service after that date constitutes acceptance.

For any privacy-related inquiry, data request, or complaint: