Privacy Policy

This Privacy Policy explains how TronHook ("we," "us," or "our") collects, uses, discloses, and protects your information when you access or use the TronHook platform, API, dashboard, and website at tronhook.com (collectively, the "Service"). By using the Service you agree to the practices described below.

1. Information We Collect

1.1 Information You Provide

• Account information: email address, name, and optional organization name.
• Webhook configuration data: webhook endpoint URLs, TRON addresses you choose to monitor, event type filters, and stream settings.
• Communications: any messages or feedback you send us via email or support channels.

1.2 Information Collected Automatically

• Usage data: API call logs, webhook delivery logs, feature usage, and error rates.
• Device and browser data: IP address, browser type, operating system, and referring URL.
• Cookies and similar technologies: session cookies, authentication tokens, and analytics identifiers (see Section 6).

1.3 Information We Do NOT Collect

We do not collect or store your private keys, wallet passwords, seed phrases, or payment card numbers. All payment processing is handled by Stripe, and we never have access to your full card details.

2. How We Use Your Information

• To provide, operate, and maintain the Service.
• To process your webhook streams and deliver blockchain event notifications.
• To authenticate your account and secure API access.
• To process payments through our payment processor (Stripe).
• To send transactional emails (account confirmation, billing receipts, service alerts).
• To monitor and improve Service performance, reliability, and security.
• To respond to your support requests and communications.
• To comply with legal obligations.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Contract performance: processing necessary to provide you with the Service you signed up for.
• Legitimate interests: improving our Service, preventing fraud, and ensuring security — where these interests are not overridden by your rights.
• Consent: where you have given explicit consent, such as for optional marketing communications.
• Legal obligation: processing required by applicable law.

4. Data Sharing and Third-Party Services

We do not sell your personal data. We share information only in the following circumstances:

• Stripe: payment processing. Stripe's privacy policy governs their handling of your payment data.
• Cloud infrastructure providers: hosting and data storage (EU/US regions).
• Analytics providers: aggregated, non-personally-identifiable usage metrics to improve the Service.
• Legal compliance: if required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Webhook delivery logs are retained according to your plan tier (7 to 90 days). After account deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

6. Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies: required for authentication, security, and core functionality.
• Analytics cookies: help us understand how visitors interact with our website so we can improve it.

You can manage cookie preferences through your browser settings. Disabling essential cookies may impact your ability to use the Service.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. Webhook payloads are signed with HMAC-SHA256 to ensure integrity. While we strive to protect your data, no method of transmission or storage is 100% secure.

8. Your Rights

8.1 GDPR Rights (EEA/UK Residents)

You have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with your local data protection authority.

8.2 CCPA Rights (California Residents)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information — we do not sell personal information.
• Non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@tronhook.com. We will respond within 30 days.

9. International Data Transfers

Your data may be processed in the European Union and/or the United States. Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Blockchain Data Disclaimer

TRON blockchain data processed by the Service (transaction hashes, wallet addresses, token amounts, contract events) is publicly available on the TRON network. TronHook aggregates and delivers this public data but does not control or guarantee its accuracy. TronHook does not provide financial, investment, or legal advice. You should not rely on webhook data as the sole basis for financial decisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date, and where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@tronhook.com.