Privacy Policy

Last updated: May 19, 2026

This Privacy Policy explains how spotisolutions ("we", "us", "our") collects, uses, and protects information when you use our website and services. By using the service you agree to the practices described here.

Information we collect

• Account data — the email address and password you provide when registering. Passwords are stored only as a salted bcrypt hash and are never readable by us.
• Order data — the campaigns, targets, and account purchases you create, together with their status and history.
• Balance & transactions — top-ups, charges, refunds, and bonuses applied to your account.
• Technical data — IP address, browser type, and timestamps, recorded for security, rate-limiting, and fraud prevention.

How we use your information

• To create and operate your account and process the orders you place.
• To process top-ups and maintain an accurate balance ledger.
• To detect, prevent, and investigate abuse, fraud, and security incidents.
• To respond to your support requests and communicate service-related notices.

Payments

Crypto top-ups are processed by our payment provider, Heleket. When you pay, you interact directly with the provider's hosted page. We do not collect, see, or store your wallet credentials or private keys. We receive only the payment status and amount needed to credit your balance.

Cookies

We use a single essential session cookie to keep you signed in. It is set with HttpOnly and SameSite attributes and is required for the service to function. We do not use advertising or third-party tracking cookies.

Third parties

We share data only as necessary to operate the service: with our payment provider to process top-ups, and with our upstream fulfilment provider to deliver orders. We do not sell your personal information.

Data retention

We retain account and transaction records for as long as your account is active and as required for accounting, security, and legal purposes. You may request deletion of your account by contacting us.

Security

We apply industry-standard safeguards including hashed passwords, CSRF protection, rate-limiting, and encrypted transport (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

You may request access to, correction of, or deletion of your personal data. To exercise these rights, contact us at the address below.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy? Email us at support@spotisolutions.xyz.