Privacy Policy

This Privacy Policy explains how OGRoute collects, uses, shares and protects personal data when you use its website, swap interface and API services. Personal data means information relating to an identified or identifiable individual.

This Policy applies to individuals using the Services and people acting on behalf of businesses, including developers and integration partners. Where a business sends its end users’ personal data to OGRoute, this Policy applies to our handling of that information.

This Policy describes our data practices. It does not replace our Terms of Use or the privacy notices of independent wallets, DEX protocols, blockchain networks or business integrators. We request consent separately where consent is required; accessing the Services does not by itself constitute consent to every activity described here.

The information processed depends on which Services you use. The categories below apply to the relevant interaction, rather than to every visitor.

Please provide only information relevant to your enquiry or use of the Services. If we receive personal data that we do not need, we assess whether it should be deleted or otherwise handled in accordance with applicable law. We may retain relevant correspondence where needed to resolve an enquiry, protect the Services or meet a legal obligation.

We collect personal data about website visitors, traders, developers, business representatives and people who contact us. We may also receive information about individuals through business integrations. Company information falls within this Policy only where it relates to an identifiable individual.

We are responsible as a data controller for processing whose purposes and means we determine, including handling enquiries and administering our Services. If we process personal data solely on a business customer’s instructions, the applicable data processing agreement sets out our responsibilities. Integrating businesses remain responsible for their own data practices and privacy notices.

We use personal data, as relevant to the interaction, to respond to enquiries; evaluate and support integrations; process routing requests; return quotes; administer API access and applicable billing; investigate errors; maintain service performance; prevent misuse and unauthorised access; and handle complaints or legal claims. We also process information where necessary to meet applicable legal obligations.

Where applicable law requires a legal basis, we rely on the basis appropriate to the activity: performing a contract with you or taking requested steps before entering it; compliance with a legal obligation; consent; or legitimate interests where that basis is available and those interests are not overridden by your rights. Our relevant interests include responding to business enquiries, protecting the Services and managing business relationships.

We use consent for optional activities where required, including relevant marketing or tracking technologies. You may withdraw that consent without affecting the lawfulness of earlier processing. If information is necessary to fulfil a request or provide a feature, we explain the requirement and the effect of not providing it.

We may disclose information to service providers that support hosting, infrastructure, monitoring, communications, support and applicable payment processing, to the extent needed for their work. Providers processing data on our behalf are subject to appropriate contractual requirements.

Information may also be disclosed to professional advisers for relevant legal or business matters; authorities where disclosure is required or otherwise permitted by law; and parties involved in a proposed or completed corporate transaction, subject to applicable protections. We may share information for another purpose when you request it or give valid consent.

We do not sell personal data.

We use technical and organisational measures appropriate to the nature of the personal data and the risks of processing. Access is limited to persons who need it for authorised purposes. No internet-based service can guarantee absolute security. Protect your wallet, signing credentials and API credentials, and notify us if you suspect unauthorised access.

We retain personal data for the period needed for the purpose for which it was collected, taking account of applicable legal requirements, the duration of the business relationship, support needs, security investigations and legal claims. Different records may have different retention periods. When retention is no longer justified, we delete or anonymise the information in accordance with our retention procedures.

Depending on the law applicable to your circumstances, you may have rights to access personal data, correct inaccuracies, request deletion, restrict processing, receive certain data in a portable format, object to processing and withdraw consent. You may also have a right to complain to the relevant data protection authority. These rights are subject to applicable conditions and exceptions.

To exercise your rights, contact us using the details at the end of this Policy. We may request proportionate information to verify your identity or authority to act for another person. We respond within the period required by applicable law and explain any lawful restriction on your request.

If your request concerns information processed by a business that integrates OGRoute, contact that business in the first instance. We will assist or direct your request as appropriate to our role. Disconnecting a wallet does not automatically erase previously collected records.

Our service providers may process information in countries other than your country of residence. Where a transfer is subject to legal restrictions, we use the safeguards or transfer mechanisms required by the applicable law. You may contact us for information about the relevant safeguards.

The Services are intended for persons aged 18 or older and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so that we can investigate and take the steps required by applicable law.

We may respond to your enquiries and send communications concerning an integration, API access, service changes or security. If we send promotional communications, we do so in accordance with applicable law and provide a way to unsubscribe. Opting out of marketing does not prevent necessary service correspondence.

We may use cookies and similar technologies, including browser storage, to support website or frontend functionality, remember preferences and understand usage. Our Cookie Policy provides details of the technologies used and the available controls. Where consent is required for optional technologies, we obtain it before use. You can also manage cookies through your browser settings. Disabling some technologies may affect the relevant features.

Information recorded on public blockchains, including wallet addresses and transaction details, may remain publicly available and be copied or analysed by others. OGRoute cannot amend or delete records from independently operated blockchains. Disconnecting a wallet does not erase blockchain records or automatically delete information held in our systems. We handle copies under our control in accordance with this Policy and applicable law.

Wallet providers, DEX protocols, RPC providers and businesses integrating OGRoute may process information under their own privacy notices. Their role depends on the service and connection used. Review their notices before using their services. This does not remove our responsibility for personal data that we process.

Where EU or UK data protection law applies, rights include access, rectification, erasure, restriction and portability, subject to the relevant conditions. You may object to processing based on legitimate interests, and to direct marketing at any time. You may withdraw consent and complain to the competent supervisory authority. Where we rely on legitimate interests, we consider the impact of processing on your rights. Mandatory data protection rights are not restricted by a governing-law provision in our Terms of Use.

We may update this Policy to reflect changes in the Services, our data practices or legal requirements. The effective date identifies the current version. For material changes, we provide notice through the Services or another appropriate channel and obtain new consent where required by law.

For privacy questions, complaints or requests to exercise your rights, please contact us using the details below. Identify the relevant interaction, such as the website, trader frontend or business integration, and provide enough information for us to assess your request. Please do not send private keys or seed phrases. Contact us by email at support@ogroute.com.