1. Overview
Trustless Commerce is built around non-custodial wallets. We minimize the data we collect and never receive your passkey private keys, biometrics, seed phrases, or security-key PINs.
2. Information we do not collect
We do not collect or store:
- Passkey or security-key private keys.
- Biometric templates (fingerprints, face data, or voiceprints).
- Seed phrases or recovery phrases (we do not use them).
- YubiKey or security-key PINs.
3. Information we collect to operate the Services
When you use a Trustless Commerce wallet or merchant tools, we may process:
- Wallet address and on-chain public data.
- Passkey public key coordinates and WebAuthn credential identifiers.
- Device labels you choose when creating or pairing a device.
- Optional recovery email addresses and guardian contact information you provide.
- Super Wallet entity names, work emails, and key-enrollment metadata.
- Invoice and payment metadata you or your integrations submit (amounts, references, status).
- Technical logs such as IP address, user agent, and API request metadata for security and abuse prevention.
4. Information stored only on your device
Your browser may store locale, theme, wallet session, wallet registry entries, dismissed notices, invoice-create preferences, and similar settings in localStorage. This data stays on your device unless you clear site data.
5. How we use information
We use collected information to:
- Register wallets and devices and relay signed transactions to bundlers.
- Provide invoicing, checkout, merchant dashboards, and Super Wallet coordination.
- Send transactional email (for example recovery or notification messages).
- Operate fiat on/off-ramp flows when you choose to use them.
- Maintain security, prevent abuse, and comply with legal obligations.
6. Service providers
We use infrastructure and service providers such as RPC endpoints, account-abstraction bundlers, email delivery ([email protected]), hosting providers, and fiat partners. They process data only as needed to provide their portion of the Services.
7. We do not sell your personal information
We do not sell or share personal information for cross-context behavioral advertising. We do not operate an advertising network or analytics ad stack on the wallet product.
8. Retention
We retain information for as long as needed to operate the Services, comply with law, resolve disputes, and enforce agreements. You may request deletion of account metadata we control; we cannot delete or restore on-chain data or reconstruct a lost wallet.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold about you. Contact us through Telegram support to submit a request. We may need to verify your identity before responding.
Residents of certain U.S. states may have additional privacy rights under state law. We will honor applicable requests as required.
10. Children
The Services are not directed to anyone under 18. We do not knowingly collect personal information from children.
11. International users
If you access the Services from outside the United States, you understand that information may be processed in the United States and other countries where our providers operate.
12. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do.
13. Contact
Privacy questions may be sent through our Telegram support channel at https://t.me/trustlesscommerce_support.