Privacy Policy

Depending on how you use Constatum, we may process: the wallet address(es) you submit for screening; invoice details you enter and the on-chain sending wallet of a payer (for the screened-invoice flow); your email and account identifier if you create an account; payment metadata from our payment processor; and basic technical/usage data. Screening reports are derived from public blockchain data and third-party screening sources.

We process this data to provide the service you requested (performance of a contract), to run and secure the platform and meet our own legal obligations, and — for a payer's wallet screened via an invoice — on the basis of legitimate interests in providing screening to the issuer, balanced against the payer's rights. Optional analytics run only with your consent.

We use trusted processors to run the service, including: Supabase (database/hosting), MistTrack/SlowMist (AML screening), Alchemy and public blockchain sources (on-chain data), Stripe (payments), Resend (email), and — for the map/reviews features — OpenStreetMap, CARTO, and Google. We only share what each needs to perform its function, and for screening we send only public wallet addresses.

Some processors are outside the EU/EEA (e.g. MistTrack is China-affiliated; some providers are US-based). Where required, such transfers rely on appropriate safeguards. We send only public addresses to the AML provider, not your identity.

We keep reports and settlement records for as long as needed to provide the service, support you, and meet legal/record-keeping obligations, then delete or anonymise them. Optional-analytics data is retained per its own limits.

Under the GDPR you can request access, correction, deletion, restriction, portability, and object to certain processing, including profiling. If you are a payer whose wallet was screened, you may contact us to exercise these rights. You can also complain to your data protection authority (in Latvia, the Datu valsts inspekcija).

See our Cookie Policy for cookies and consent. For any privacy request, contact ClefDev SIA, Riga, Latvia. This summary is being finalised with counsel and does not reduce your statutory rights.