Dealtous - Privacy Policy

Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, and otherwise processed when you use Dealtous.

1. Data Controller

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), the controller responsible for Dealtous is:

2. Personal Data We May Collect

Depending on how you use Dealtous, we may process the following categories of personal data:

Account Information

• Name or display name;
• Email address;
• Username;
• Account identifiers; and
• Account and profile information.

Transaction Information

• Transaction/order identifiers;
• Channel listing information;
• Purchase and sale information;
• Transaction amount;
• Cryptocurrency and blockchain network used;
• Public wallet addresses;
• Blockchain transaction IDs;
• Transaction status;
• Fees; and
• Related transaction records.

Telegram Channel Information

• Channel name;
• Channel statistics;
• Ownership-related information;
• Evidence submitted for channel verification; and
• Information necessary to facilitate ownership transfer.

Communications

• Support requests;
• Emails;
• Dispute communications;
• Evidence provided in connection with disputes; and
• Other communications with Dealtous.

Technical and Security Information

We may collect information such as:

• IP address;
• Browser and device information;
• Login activity;
• Security-related events; and
• Technical logs.

Verification Information

Where reasonably necessary for fraud prevention, ownership verification, security, or legal compliance, Dealtous may request additional information.

If identity documentation is introduced in the future, users will be informed about the information required and its processing.

3. Why We Process Personal Data

We may process personal data to:

• Create and manage user accounts;
• Operate the Dealtous marketplace;
• Publish and manage channel listings;
• Facilitate transactions;
• Record cryptocurrency payments and payouts;
• Verify channel ownership;
• Facilitate Telegram ownership transfers;
• Provide customer support;
• Handle cancellations, refunds, and disputes;
• Detect and prevent fraud and unauthorized activity;
• Maintain Platform security;
• Enforce our Terms & Conditions;
• Maintain transaction and accounting records;
• Comply with applicable legal obligations; and
• Establish, exercise, or defend legal claims.

4. Legal Bases for Processing

Where GDPR applies, Dealtous relies on one or more appropriate legal bases depending on the processing activity.

These may include:

Performance of a Contract

Processing necessary to provide the Platform and facilitate transactions requested by users.

Legal Obligations

Processing required to comply with applicable legal, regulatory, tax, accounting, or other obligations.

Legitimate Interests

Processing reasonably necessary for purposes such as:

• Fraud prevention;
• Platform security;
• Abuse prevention;
• Dispute resolution;
• Improving Platform reliability; and
• Protecting Dealtous and its users.

Where legitimate interests are relied upon, we consider those interests against the rights and interests of affected individuals.

Consent

Where consent is required, for example for certain optional marketing or tracking technologies, consent may be requested separately.

Consent can be withdrawn where applicable.

5. Cryptocurrency and Blockchain Data

Transactions conducted through public blockchain networks may create permanent public records.

Information such as wallet addresses, transaction amounts, transaction IDs, and timestamps may be publicly visible on the relevant blockchain independently of Dealtous.

Public blockchain records generally cannot be altered or deleted by Dealtous.

Dealtous does not require users to provide wallet private keys or seed phrases and users should never provide them to Dealtous or another user.

6. How We Share Personal Data

We do not sell personal data.

Personal data may be shared where necessary with categories of recipients such as:

• Hosting and infrastructure providers;
• Email and communication providers;
• Security and fraud-prevention service providers;
• Technical service providers supporting the Platform;
• Professional advisers such as lawyers or accountants;
• Relevant counterparties where information is necessary to complete or resolve a transaction; and
• Courts, law enforcement, regulators, tax authorities, or other authorities where disclosure is legally required.

Only information reasonably necessary for the relevant purpose should be shared.

7. Buyer and Seller Privacy

Dealtous may restrict direct contact information between buyers and sellers where appropriate to protect transaction integrity and prevent circumvention of the Platform.

Information necessary to complete a transaction may nevertheless be made available where required for the transaction or by applicable law.

Users must not misuse personal information obtained through Dealtous.

8. International Data Transfers

Dealtous may use service providers or interact with users located outside the European Economic Area (EEA).

Where GDPR requires safeguards for an international transfer of personal data, appropriate safeguards will be used as required by applicable law.

9. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, fraud-prevention, dispute, security, and record-keeping requirements.

Different categories of data may have different retention periods.

Transaction records may need to be retained longer than ordinary account or communication data where necessary for legal, accounting, fraud-prevention, or dispute purposes.

When data is no longer required, it will be deleted or anonymized where reasonably possible and legally appropriate.

Information permanently recorded on a public blockchain cannot be deleted or modified by Dealtous.

10. Data Security

Dealtous uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, destruction, or loss.

No online system can guarantee absolute security.

Users are responsible for protecting their own account credentials, email accounts, Telegram accounts, cryptocurrency wallets, private keys, and devices.

11. Cookies and Similar Technologies

Dealtous may use cookies and similar technologies that are necessary for Platform operation, account authentication, security, preferences, and other functionality.

Where analytics, advertising, or other non-essential tracking technologies requiring consent under applicable law are used, appropriate information and consent controls should be provided.

Users may also manage certain cookie settings through their browser.

12. Marketing Communications

Where Dealtous sends optional marketing communications, users may unsubscribe using the mechanism provided in the communication or by contacting info@dealtous.com

Service-related communications necessary for an account or transaction are not marketing communications.

13. Your Data Protection Rights

Depending on applicable law, including GDPR where relevant, individuals may have rights including:

• Access to personal data;
• Correction of inaccurate data;
• Deletion of personal data;
• Restriction of processing;
• Objection to certain processing;
• Data portability;
• Withdrawal of consent where processing relies on consent; and
• The right to lodge a complaint with a competent data protection authority.

These rights are subject to applicable legal conditions and exceptions.

Requests may be sent to:

info@dealtous.com

We may need to verify the identity of the person making a request before acting on it.

14. Account Deletion

A request to delete an account does not necessarily require deletion of every associated record.

Dealtous may retain information where reasonably necessary or legally required for purposes such as transaction records, fraud prevention, dispute resolution, accounting, compliance, or legal claims.

15. Minors

Dealtous is intended only for users aged 18 or older.

We do not knowingly permit individuals under 18 to use the Platform.

If we become aware that an underage person has provided personal information in violation of this requirement, appropriate steps may be taken to remove the account and relevant information, subject to applicable law.

16. Third-Party Services

Dealtous may contain links to or interact with third-party services, including Telegram and public blockchain networks.

Those services operate independently and may have their own privacy policies and practices.

Dealtous is not responsible for the independent privacy practices of third-party services.

17. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes to the Platform, processing activities, service providers, or applicable law.

Material changes will be communicated or made available through the Platform as appropriate.

The current version and its last-updated date will remain available on Dealtous.

18. Contact

For privacy questions or requests: