Privacy Policy

1. The short version

We collect the minimum needed to sell you a digital good and deliver it: who you are, what you ordered, and the Litecoin payment that settled it. We do not sell your data, we do not run advertising trackers, and we do not use third-party analytics on this site.

We keep order records so we can re-deliver lost credentials and answer disputes. You can ask for a copy of your data, or for it to be deleted, at any time.

2. Who is responsible for your data

Zenvia is the controller of the personal data described in this policy. Our legal entity, registration number, postal address and data-protection contact details are published in our Legal Notice.

Questions about this policy or about your data: support@sumox.net. We answer data requests there, normally within a few working days.

3. What we collect

Account data - the name you give us, your email address, whether that address has been verified, and the authentication records needed to sign you in securely. Your password is stored only as a salted hash; we could not read it even if we wanted to.

Order data - what you bought, quantity, unit price, order status (pending or paid), and the timestamps of when you ordered and when payment was recorded.

Payment data - the Litecoin transaction that settled your order, the amount, and the address you paid from. We record the sending address so that a refund or a re-dispatch can be returned to the right place, and so that support can identify your payment without you having to prove it.

Correspondence - messages you send to support by email, including any order number or payment detail you choose to include.

Technical data - IP address, user agent, and server logs generated automatically when your browser requests a page. These exist for security and error diagnosis, not for building profiles.

4. What we deliberately do not collect

• Card or bank details - we cannot take card or bank payments, so we never see them.
• Advertising or marketing profiles - there is no advertising pixel, no retargeting tag and no data broker on this site.
• Third-party analytics - we do not embed Google Analytics, Mixpanel, Sentry or similar. Site usage is measured from our own server logs only.
• Precise location - we never ask for or derive your GPS position or address.
• Biometric data - no fingerprint, face or voice data is processed.

5. How we use it

We use personal data to:

• create and secure your account, and keep you signed in;
• take payment, confirm it on the Litecoin network, and deliver what you bought;
• provide support - locating an order, re-dispatching credentials, processing a refund;
• detect and prevent fraud, abuse of discounts, multiple-account abuse and unauthorised access;
• keep accurate accounting and transaction records we are legally required to hold;
• improve the site, using aggregated or de-identified figures where possible;
• comply with court orders, lawful requests and our own published policies.

We do not use your data for automated decision-making that produces legal or similarly significant effects about you, and we do not profile you for marketing.

6. Litecoin payments and the blockchain

Litecoin transactions are public. Anyone can see the address, amount and timing of a payment on the network explorer - this is a property of the currency, not a choice we make.

We do not need to identify you from the blockchain, and we do not buy data from blockchain-analysis companies. We only match a transaction to your order when it arrives at our address for the amount we quoted you.

Because the blockchain is permanent and public, we cannot delete a transaction. If you would prefer not to have an address linked to your account, pay from a fresh address each time - but tell us which one so we can still find your payment if you need support.

7. Cookies and local storage

This site uses only the cookies required to keep you signed in and to operate your basket and session. There are no advertising cookies, no social media cookies and no cross-site tracking cookies.

We do not store personal data in your browser's local storage. Your basket lives on our server, tied to your account.

Blocking cookies will stop you signing in and holding a basket, but the catalogue remains readable.

8. Who we share it with

We share personal data only with the service providers that let us run the shop:

• our hosting and database providers, who store the data on servers we instruct them to run;
• our authentication service, which handles sign-in and password hashing;
• our email provider, which sends delivery and support messages to you;
• our payment network - only the public blockchain data described above.

8.1 When else we may disclose it

We may also disclose personal data where we are legally obliged to - for example under a valid court order or a lawful request from a competent authority - or where it is necessary to establish, exercise or defend legal claims.

We may transfer it as a whole if the business is restructured or sold, in which case the receiving party inherits the obligations in this policy and we will tell you beforehand where the law requires it.

We never sell or rent personal data, and we never share it with advertisers.

9. International transfers

Our systems and our providers operate in the European Economic Area. Where any data is processed outside the EEA, we rely on an adequacy decision of the European Commission or on standard contractual clauses together with appropriate safeguards, as applicable to the provider concerned.

The Litecoin network is global and cannot be confined to any jurisdiction. As described in section 6, payments made to us are visible publicly wherever they are made from.

10. How long we keep it

When a retention period ends the data is deleted or irreversibly anonymised.

• Account data - for as long as your account exists, and for a short period afterwards to honour deletion requests consistently and to handle late disputes.
• Order and payment records - for as long as needed to provide re-delivery and support, and for as long as accounting law requires us to keep them, after which they are deleted or anonymised.
• Support correspondence - for up to twenty-four months after the conversation ends, so that a recurring issue can be traced back.
• Server logs - for up to thirty days, unless we are investigating a security incident, in which case we keep what the investigation needs.

11. Your rights

Depending on where you live, you may have the right to:

• access a copy of the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete your data, subject to what we must keep by law;
• restrict or object to how we use it;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your national data-protection supervisory authority.

To exercise any of these, email support@sumox.net from the address registered on your account. We may need to verify it is really you before we act - that protects you as much as it protects us.

We do not charge for a first request, and we respond within one month, extendable by two months for complex or repeated requests where the law allows.

12. How we protect it

Transport encryption (HTTPS) on every page, salted password hashing, database access restricted to the services that need it, session-based authentication, and separate credentials for administrative access.

Deliveries are sent only to the address registered on your account, and we never send passwords or credentials anywhere else.

No system is perfectly secure. If we ever suffer a breach that affects your personal data, we will notify you and the relevant supervisory authority as the law requires.

13. Children

The site is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

14. Links to other sites

The site links out to third parties - supplier platforms and blockchain explorers. Their privacy policies govern what happens once you leave zenvia.win, and we have no control over them.

15. Changes to this policy

We update this policy when our practices, providers or legal obligations change. The date at the top shows when the current version took effect. If a change materially affects how we use data we already hold about you, we will tell you before it takes effect.

16. Contact

Email support@sumox.net with the subject "Privacy" for anything in this policy, or write to the postal address in our Legal Notice. Include the email registered on your account so we can act on your request quickly.