Privacy Policy

Last Updated: January 9, 2026

STO Chain ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our bridge service.

1. Information We Collect

1.1 Information You Provide

Wallet Addresses:

- Source wallet address (Kaia Network or STO Chain)
- Destination wallet address for token transfers
- Transaction signatures and approvals

Contact Information:

- Email address (optional, for transaction notifications)
- Telegram username (if you contact support)

Transaction Data:

- Token amounts
- Transaction timestamps
- Memo fields (optional text you provide)
- Transaction hashes

1.2 Information Automatically Collected

Usage Data:

- IP address
- Browser type and version
- Device information
- Operating system
- Pages visited and time spent
- Referring website

Blockchain Data:

- All transactions are recorded on public blockchains
- Transaction history is publicly accessible via block explorers
- Wallet balances and activity are publicly visible

Cookies and Tracking:

- Session cookies for functionality
- Analytics cookies to improve our service
- Performance cookies to optimize user experience

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Service Delivery

- Process token bridge transactions
- Verify transaction authenticity
- Send transaction status notifications
- Provide customer support

2.2 Service Improvement

- Analyze usage patterns and trends
- Improve user interface and experience
- Optimize transaction processing
- Develop new features

2.3 Security and Compliance

- Detect and prevent fraud
- Monitor for suspicious activity
- Comply with legal obligations
- Enforce our Terms of Use

2.4 Communications

- Send transaction confirmations and updates
- Notify you of service maintenance
- Respond to your inquiries
- Send important security alerts

3. Information Sharing and Disclosure

3.1 We DO NOT Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Service Providers

We may share information with trusted third-party service providers:
- Email service providers (for notifications)
- Analytics platforms (Google Analytics, Mixpanel)
- Cloud hosting services (AWS, Google Cloud)
- Security monitoring services

All service providers are bound by confidentiality agreements.

3.3 Blockchain Networks

Transaction data is inherently public on blockchain networks:
- Wallet addresses are visible on-chain
- Transaction amounts and timestamps are public
- This information cannot be deleted from the blockchain

3.4 Legal Requirements

We may disclose information when required by law:
- In response to valid legal requests (court orders, subpoenas)
- To protect our rights and property
- To prevent fraud or illegal activity
- To protect user safety

3.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity.

4. Data Security

4.1 Security Measures

We implement industry-standard security practices:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Regular security audits
- Access controls and authentication
- DDoS protection

4.2 User Responsibility

Security also depends on you:
- Keep your private keys secure
- Use strong wallet passwords
- Never share your seed phrase

4.3 Data Breach Notification

In the event of a data breach, we will:
- Notify affected users within 72 hours
- Provide details of the breach
- Explain steps taken to resolve it
- Recommend protective actions

5. Data Retention

5.1 Retention Periods

- Transaction History: Retained indefinitely for blockchain integrity
- Email Addresses: Retained until you request deletion
- Support Communications: Retained for 2 years

5.2 Blockchain Data

Once recorded on blockchain, transaction data cannot be deleted due to the immutable nature of blockchain technology.

6. Your Privacy Rights

6.1 Access and Portability

You have the right to:
- Request a copy of your personal data
- Export your transaction history
- Receive data in a machine-readable format

6.2 Correction and Update

You can:
- Update your email address
- Correct inaccurate information
- Request data corrections

6.3 Deletion

You can request deletion of:
- Your email address
- Optional account information
- Cookies and browsing data

Note: Blockchain transaction data cannot be deleted.

6.4 Opt-Out

You can opt out of:
- Email notifications (except critical security alerts)
- Analytics cookies (via browser settings)
- Marketing communications

6.5 Exercising Your Rights

To exercise these rights, contact us at: support@stochain.io

We will respond within 30 days.

7. International Data Transfers

Transfer Safeguards

We ensure adequate protection through:
- Standard contractual clauses
- Data processing agreements
- Compliance with GDPR and local laws

8. Cookies Policy

8.1 Types of Cookies We Use

Essential Cookies:

- Required for basic functionality
- Wallet connection management
- Session maintenance

Analytics Cookies:

- Google Analytics
- Mixpanel
- Usage tracking

Preference Cookies:

- Language settings
- Display preferences
- Notification preferences

8.2 Managing Cookies

You can control cookies through:
- Browser settings (disable/delete cookies)
- Cookie consent banner on our site
- Third-party opt-out tools

Note: Disabling essential cookies may affect functionality.

9. Third-Party Services

9.1 Wallet Providers

When you connect your wallet (MetaMask, Keplr, etc.):
- Their privacy policies apply
- We do not control their data practices
- Review their policies separately

9.2 Block Explorers

Links to external block explorers:
- KaiaScan (Kaia Network)
- STO Chain Explorer
- Their privacy policies apply when you visit

9.3 Social Media

Links to our social channels:
- Twitter, Telegram, Discord
- Their privacy policies apply
- We are not responsible for their practices

10. Changes to Privacy Policy

10.1 Notification of Changes

We may update this Privacy Policy:
- Posted on this page with updated date
- Email notification for material changes
- 30-day notice period for significant changes

10.2 Acceptance

Continued use after changes constitutes acceptance of the updated policy.

11. Contact Information

For privacy-related questions or requests:

Support: support@stochain.io
Address: 1301, Daeryung Technotown 19, 70 Gasan Digital 2-ro, Gasan-dong, Geumcheon-gu, Seoul 08589, Republic of Korea
Website: stochain.io

Response Time: We aim to respond within 30 days.

12. Transparency Report

We believe in transparency. Our annual report includes:
- Number of data requests received
- Types of requests (law enforcement, user rights)
- How we responded
- Security incidents (if any)

13. Your Consent

By using the STO Chain Bridge Service, you consent to:
- Collection and use of information as described
- Transfer of data internationally
- Use of cookies and tracking technologies
- Processing for purposes outlined above

You can withdraw consent at any time by:
- Disconnecting your wallet
- Opting out of emails
- Deleting your account data (contact support@stochain.io)

Important: This Privacy Policy is provided in English. Translations may be available, but the English version governs in case of discrepancies.