Privacy Policy

Who is responsible

Fluenta SAS, a company registered in Uruguay, operates Satqo and is responsible for your personal data. We process it under Uruguay’s Law 18.331 on personal data protection and, for people in the EU and the UK, the GDPR. You can reach us at privacy@satqo.com.

What we collect

• Account details: your name or business name, email address and a hashed password.
• Business and verification details, when we ask for them: company documents, identity documents of owners and directors, and information about the source of funds.
• Payment data: invoices, amounts, wallet addresses, transaction hashes and the callbacks we send to your systems.
• Technical data: IP address, browser, device and logs of sign-ins and API requests, kept for security.
• Card data, once the card launches, is handled by our card-issuing partner. We see the transactions made with your card, not your full card number.

We also see limited data about your customers: the wallet they paid from, the amount and the time. We don’t ask your customers to create an account.

How we use it

• to open and run your account and process your payments and payouts;
• to screen payments and customers for fraud, sanctions and money laundering;
• to keep the service secure and investigate misuse;
• to answer your questions and send you service messages;
• to meet our legal and regulatory obligations.

We rely on performing our contract with you, our legal obligations and our legitimate interest in keeping the service safe.

Blockchain data is public

Addresses and transactions on public blockchains such as TRON, TON, Ethereum, Arbitrum and Base are visible to anyone and can’t be deleted. We can delete what we hold, but not what is recorded on a blockchain.

Who we share it with

• hosting, database and blockchain node providers that run the service for us;
• blockchain analytics providers that score the addresses sending you payments;
• our card-issuing partner, for card customers;
• Google, for website analytics, only if you accept analytics cookies;
• regulators, courts and law enforcement when the law requires it.

Each provider may only use the data to do work for us. We never sell personal data.

Cookies

satqo.com uses Google Analytics cookies to count visits and see which pages are read. You can decline them in the banner or with “Cookie settings” at any time: Google then gets only cookieless signals (the page and a rough location, with no cookie and no identifier) and the analytics cookies are removed. In the European Economic Area, the UK and Switzerland analytics cookies are set only after you accept. We don’t use advertising cookies. dash.satqo.com sets a session cookie to keep you signed in, and a random device identifier that helps us spot fraud, such as someone inviting themselves through the referral programme. If you open a referral link, the referral code is kept in a cookie for 30 days so the sign-up knows who invited you.

On your first visit satqo.com also keeps a small first-party cookie, sq_src, for 90 days: the campaign tags of the link you followed, the site that sent you (its name only) and the page you landed on. If you open an account, we store that with it so we know which channels bring sign-ups. It holds no identifier and is never shared with Google or anyone else.

You can change your choice at any time with the “Cookie settings” link at the bottom of every page.

How long we keep it

We keep account data while your account is open. Payment records and verification documents are kept for at least five years after the account closes, because anti-money-laundering law requires it. Security logs are kept for a shorter period.

How we protect it

Traffic is encrypted in transit, wallet keys are encrypted at rest, and access to production systems is limited to the people who need it. No system is perfectly secure, so please use a strong password and keep your API keys private.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to certain processing and ask for your data in a portable format. Write to privacy@satqo.com. Some data, such as payment records, we must keep by law even if you ask us to delete it.

You can also complain to Uruguay’s data protection authority, the Unidad Reguladora y de Control de Datos Personales (URCDP). If you are in the EU or the UK you can complain to your local data protection authority.

Children

Satqo is for businesses and adults. We don’t knowingly collect data from anyone under 18.

Changes

We’ll post changes here and email you about material ones before they take effect.