Privacy Policy

• Account and orders: your email address, what you ordered, prices, order status and dates.
• Payments: the coin, network and amount you paid, the deposit address we created for your order, the transaction IDs and the sending address that the blockchain shows publicly, and any refund address you give us.
• Support and refunds: the messages you send in support tickets, and the reason you give for a refund request.
• Domains: the domain names you enter for your services, and the results of our DNS checks.
• Security records: the IP address of login, order and support requests, used to stop abuse, and a log of the emails we send you (address, type and time, not the content).
• On your device only: the builder keeps your progress in your browser session, and article checklists keep your ticks in your browser. We do not receive this data.

• A login cookie keeps you signed in for up to 30 days.
• An order cookie lets the browser you ordered from open that order.
• Both are strictly necessary for the site to work, so they do not need consent.
• We do not use analytics, advertising or tracking cookies, and fonts are served from our own site.

• To deliver what you ordered (orders, payments, deployment, support, refunds, domains): necessary for our contract with you (GDPR Article 6(1)(b)).
• To keep accounting records: a legal obligation under the Swedish Bookkeeping Act (GDPR Article 6(1)(c)).
• To keep the service secure and prevent fraud and abuse: our legitimate interest in protecting our users and systems (GDPR Article 6(1)(f)).
• To meet anti-money-laundering and sanctions rules where they apply: legal obligation.
• We do not sell your data and we do not use it for advertising.

• Infrastructure providers that host our website, database and the servers that run your services.
• Our email delivery provider, to send order, login and support emails.
• Blockchain data providers and public nodes we use to detect your payment. They see the deposit address and transaction, not your name or email.
• Our internal alert channel (a messaging app our team uses) receives order and ticket numbers only, never your email or messages.
• Authorities, when the law requires it.
• These providers act on our instructions under data processing agreements. Some of them may process data outside the EU/EEA; when they do, we rely on an EU adequacy decision or the EU Standard Contractual Clauses.

Transactions on a blockchain are public and permanent. We cannot change or delete anything recorded on a blockchain, including payments you make to us.

• Security records of requests (with IP addresses): about one day.
• Login links: until used or expired. Login sessions: up to 30 days.
• Domain names for an order: deleted when the order is cancelled or ends.
• Orders, payments, refunds and refund requests: 7 years after the end of the financial year, as the Swedish Bookkeeping Act requires.
• Support tickets: up to 3 years after the last message.
• Email delivery log: up to 12 months.

• You can ask for a copy of your data, ask us to correct it, delete it or restrict it, object to processing based on legitimate interest, and receive the data you gave us in a portable format.
• Some data we must keep by law, such as accounting records, even if you ask us to delete it.
• To use your rights, email [email protected] from the address on your account. We reply within one month.
• You can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the data protection authority where you live.

We use encrypted connections, one-time login links instead of passwords, limits on repeated requests, and access controls with two-step verification for our team. We never hold your wallet keys.

HeroRPC is not for anyone under 18, and we do not knowingly collect data about children.

We may update this policy. We will post the new version here with a new date and tell you by email about material changes.

RPC Solutions (organisation number 559275-3205), Stockholm, Sweden. Email: [email protected].