Privacy Policy

Last updated: June 12, 2026

CryptoAML.ai ("we", "us", "our") — operated by CryptoAML Lab, a registered data controller — provides AML screening for cryptocurrency wallet addresses. Contact: [email protected]. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

1. Information We Collect

When you use our service, we may collect:

Wallet addresses — addresses you submit for screening (publicly visible on-chain data).
Usage data — browser type, pages visited, referral source, and approximate location (country/region via IP).
Contact information — name and email address if you submit our contact form or purchase an API plan.
Payment information — handled entirely by our payment processors (Creem, Whop). We do not store payment card details.

2. How We Use Your Information

To provide and improve the AML screening service.
To process API plan subscriptions and send service-related emails.
To analyse aggregate usage patterns and optimise the product.
To comply with applicable laws and prevent fraud or abuse.

3. Cookies & Analytics

We use Google Analytics 4 and Yandex Metrica to understand how visitors use the site. These services set cookies and collect anonymised usage data. You can opt out via your browser settings or the respective opt-out tools provided by Google and Yandex.

4. Data Sharing

We do not sell your personal data. We may share it with:

Payment processors — Creem.io and Whop for billing purposes.
Analytics providers — Google Analytics, Yandex Metrica (anonymised).
Law enforcement — if required by applicable law or valid legal process.

5. Data Retention

We retain usage logs for up to 12 months. Contact form submissions are kept for up to 24 months. You can request deletion at any time by emailing [email protected].

6. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at [email protected].

7. Security

We apply reasonable technical and organisational measures to protect your data. Wallet addresses submitted for screening are processed over HTTPS and are not stored long-term.

8. Third-Party Links

Our service links to Telegram bots and external resources. We are not responsible for the privacy practices of third-party services.

9. GDPR — Additional Rights for EU/EEA Residents

If you are located in the European Union or European Economic Area, the following rights apply to you under the General Data Protection Regulation (GDPR):

Lawful basis. We process personal data on the basis of: (a) legitimate interest — providing a publicly accessible compliance tool; (b) contractual necessity — processing API plan subscriptions; (c) legal obligation — responding to lawful enforcement requests.
Right of access. You may request a copy of the personal data we hold about you.
Right to rectification. You may ask us to correct inaccurate data.
Right to erasure ("right to be forgotten"). You may request deletion of your personal data, subject to our legal obligations.
Right to data portability. You may request your data in a structured, machine-readable format.
Right to object. You may object to processing based on legitimate interest.
Right to lodge a complaint. You may lodge a complaint with your national data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Changes to This Policy

We may update this policy. The "Last updated" date at the top reflects the most recent revision. Continued use of the service after changes constitutes acceptance.

11. Contact

Questions about this policy? Email us at [email protected] or use the contact form.