Legal
Privacy Policy
This Privacy Policy explains how the operator of Seed Scanner (“Operator”, “we”, “us”, “our”) processes personal data in connection with the website cryptosoftware.tech, the Windows and Mac desktop application (“Software”), Telegram bot(s), APIs, and related services (the “Services”).
We designed this Policy to align with the EU/UK General Data Protection Regulation (“GDPR”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), and, where applicable, Québec Law 25 and other Canadian provincial privacy rules. Where those frameworks differ, we apply the standard required for your jurisdiction to the extent reasonably practicable.
1. Controller / organisation responsible
For GDPR purposes, the data controller is the Operator of the Seed Scanner Services at cryptosoftware.tech. For Canadian privacy law, that same Operator is the organisation responsible for personal information under its control.
Contact for privacy requests: Telegram support (subject: “Privacy request”).
2. Personal data we process
Depending on how you use the Services, we may process:
- Account & Telegram data: Telegram user ID, chat ID, username, display name (as provided by Telegram), activation/API key identifiers, account timestamps, ban/suspension flags;
- Usage & product data: scan/session metadata, find records (e.g. chain, address displays, amounts, status), fee/payment claim records (coin, amount, status, timestamps), device/app version signals, approximate country derived from IP;
- Technical data: IP address, timestamps, request logs, security/rate-limit signals, error diagnostics;
- Support communications: messages you send to support channels;
- Website / marketing tech: cookie or pixel identifiers, referrer/UTM parameters, and advertising click IDs (e.g. Meta/Facebook) when configured on the website.
We do not ask you to email seed phrases to us for ordinary support. If you paste secrets into chat or forms, you do so at your own risk; treat that as highly sensitive data.
3. Purposes and legal bases (GDPR)
We process personal data for the following purposes and legal bases:
- Providing the Services (account activation, Software sync, finds/fees, Telegram notifications) — Art. 6(1)(b) GDPR (contract) / PIPEDA appropriate purposes;
- Security, fraud prevention, abuse detection, debugging — Art. 6(1)(f) (legitimate interests) and, where required, legal obligations;
- Payments administration and record-keeping — contract and legitimate interests; legal obligation where bookkeeping/tax rules apply;
- Customer support — contract / legitimate interests;
- Analytics and advertising measurement on the website (where pixels/cookies are used) — consent where required by ePrivacy/GDPR, or legitimate interests where permitted; you may withdraw consent as described below;
- Compliance with law and enforcement of Terms — Art. 6(1)(c) / (f).
Our legitimate interests include operating a secure commercial service, preventing fraud, and understanding aggregate product performance — balanced against your rights and expectations.
4. Cookies and similar technologies
The website may use strictly necessary cookies for basic operation and, where configured, third-party analytics/advertising technologies (such as Meta Pixel) that may set or read identifiers on your device. Where consent is required, we rely on your consent mechanism or browser controls. You can also block cookies in your browser; some site features may still work.
5. Sharing and processors
We may share personal data with:
- hosting, database, and infrastructure providers that process data on our instructions;
- Telegram, to the extent message delivery and bot features require it;
- payment networks/blockchain (public by design) when you send on-chain payments;
- analytics/advertising partners when website tracking is active;
- professional advisers or authorities where legally required or to protect rights and safety;
- successors in a merger, acquisition, or asset transfer (with appropriate safeguards).
We do not sell personal information for money in the conventional sense.
6. International transfers
Data may be processed in countries other than your own (including where our hosting or Telegram infrastructure is located). For GDPR-restricted transfers, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and/or an adequacy decision where available, plus supplementary measures when reasonably required. Canadian users acknowledge that information may be processed outside Canada and may be subject to foreign lawful access rules.
7. Retention
We retain personal data only as long as needed for the purposes above, including: account and payment history for the life of the account plus a reasonable period for disputes, security, and legal retention; logs for shorter operational windows; marketing identifiers per vendor settings or until consent withdrawal. When no longer needed, we delete or irreversibly anonymise data where feasible.
8. Security
We implement technical and organisational measures appropriate to the risk (access controls, transport encryption where applicable, least-privilege practices). No method of transmission or storage is perfectly secure. Software and systems may contain bugs or vulnerabilities; you acknowledge residual risk and should use strong device hygiene.
9. Your rights
EU / EEA / UK (GDPR)
Subject to legal limits, you may have the right to:
- access, rectify, or erase personal data;
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time (without affecting prior lawful processing);
- lodge a complaint with your local supervisory authority.
Canada (PIPEDA / provincial laws, including Québec Law 25)
Subject to legal limits, you may request access to and correction of personal information we hold about you, and (where Law 25 or other rules apply) additional rights such as de-indexation or withdrawal of consent for non-essential processing. You may contact the Office of the Privacy Commissioner of Canada or your provincial commissioner if you have an unresolved concern.
To exercise rights, contact Telegram support with enough detail to verify your request. We may need to confirm control of the relevant Telegram account or API key.
10. Children
The Services are not directed to children under 18 (or the higher age of majority). We do not knowingly collect personal data from children. If you believe we have done so, contact us to delete it.
11. Automated decision-making
We may use automated rate-limiting, fraud heuristics, or abuse scoring. These measures are for security and service integrity. They are not intended to produce legal effects solely by automated means without appropriate human review where GDPR so requires.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The “Last updated” date will change accordingly. Material changes may also be communicated via the website, Software, or Telegram. Continued use after the effective date constitutes acknowledgement of the updated Policy where permitted by law.
13. Related documents
Use of the Software and Services is also governed by our Terms of Service & EULA.