Algoosh Privacy Policy

Last updated: January 26, 2026

This Privacy Policy explains how Algoosh (“Algoosh,” “we,” “us”) collects, uses, discloses, and protects information when you use our websites, apps, buyer/seller portals, QR checkout experiences, APIs, and related services (collectively, the “Services”).

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1) Who we are

For privacy purposes, the data controller is:

Controller: Algoosh (operator of algoosh.com)
Contact: Contact us (via the contact method provided on our website)

If you are a seller, note that you may separately act as an independent controller for buyer information you receive for fulfillment (see Section 6).

2) Key ideas

Wallet-first, non-custodial: We do not ask for or store your wallet private keys/seed phrase.
Blockchain is public and permanent: Any transaction you submit to a blockchain network (e.g., Algorand) may be publicly visible and cannot be deleted by Algoosh.
We minimize personal data on-chain: When the protocol stores order details, it is intended to store encrypted content and/or hashes.
Sellers fulfill: Sellers are responsible for shipping/fulfillment and their own privacy compliance regarding buyer data they process.

3) Information we collect

We collect the minimum information needed to provide the Services. Depending on how you use Algoosh, we may collect:

A) Information you provide directly

Contact information (e.g., information you submit when subscribing to updates or contacting support).
Content you submit (messages, support requests, feedback).
Seller-provided catalogue/product information (product names, descriptions, prices, images, and other listing data).

B) Wallet and transaction information

Wallet address(es) you connect to the Services.
On-chain transaction metadata related to your use of the protocol (e.g., transaction IDs, application/box interactions, timestamps, and network identifiers).
Order and payment state information that may be derived from on-chain activity.

Important: Wallet addresses and many on-chain records are public by nature and may be processed by blockchain nodes, indexers, and explorers globally.

C) Device, usage, and log data

IP address, device identifiers, browser type, app events, pages viewed, and approximate location derived from IP (coarse).
Security logs (e.g., fraud prevention, rate limiting, abuse detection).

D) Cookies and similar technologies

We may use cookies/local storage for:

Strictly necessary functions (session, security, preferences).
Optional analytics (only where enabled and, where required, based on consent).

4) Blockchain-specific notice

Algoosh integrates with blockchain networks. Blockchains are typically designed to be append-only and immutable.

Public visibility: Blockchain data (including wallet addresses and transaction details) may be visible to anyone and indexed by third parties.
No unilateral deletion: Algoosh generally cannot delete or edit blockchain records.
Encryption does not eliminate obligations: Even if data is encrypted before being stored on-chain, regulators may still treat it as personal data in some contexts.
Your choices matter: You control whether you broadcast a transaction. Do not include personal data in public transaction fields or public notes/fields you do not want to be permanent.

5) How we use information

We use information to:

Provide and operate the Services (connect wallets, display order state, enable checkout flows).
Facilitate protocol interactions and user requests (e.g., generating order views, QR checkout experience).
Communicate with you (support, updates, security notifications).
Protect safety and integrity (fraud/abuse prevention, debugging, security monitoring).
Comply with legal obligations and enforce policies.

6) Sellers are independent parties (role split)

If you purchase physical goods, the seller may receive and process information needed to fulfill the order (e.g., delivery details). In many cases, the protocol is designed so that delivery/order details are encrypted, and only the seller/buyer can decrypt using their keys.

Seller responsibility: Sellers are responsible for their own privacy notices, lawful bases, retention, and handling of buyer fulfillment data.
Algoosh limitation: Algoosh is not able to access decrypted delivery content where it is end-to-end encrypted by design.

7) Legal bases for processing (EEA/UK/Switzerland)

Where GDPR/UK GDPR applies, we rely on:

Contract necessity (to provide the Services you request).
Legitimate interests (security, fraud prevention, product improvement, reliability).
Consent (for optional cookies/marketing where required).
Legal obligation (compliance requests, lawful demands).

We may share information with:

Service providers (processors) that help us run the Services (hosting, monitoring, support tooling), under contractual confidentiality and data-protection terms.
Blockchain networks (data you submit to a blockchain is processed by network participants and may be publicly visible).
Sellers / buyers as required to complete an order flow (e.g., order status, fulfillment coordination), noting encryption constraints.
Legal and safety: if required by law, subpoena, court order, or to protect rights, safety, and prevent fraud/abuse.
Business transfers: if we undergo a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal information in exchange for money. If we ever engage in “sharing” for cross-context behavioral advertising as defined by some US laws, we will provide required opt-out mechanisms.

9) International transfers

Your information may be processed outside your country, including in the United States or other jurisdictions where we or our providers operate.

Where required, we use safeguards such as Standard Contractual Clauses and/or other lawful transfer mechanisms recognized by applicable law.

10) Data retention

We retain personal information only as long as reasonably necessary for:

providing the Services,
legal/compliance needs,
dispute resolution,
security and abuse prevention.

Blockchain data: On-chain records may be retained indefinitely by the network and third-party indexers. Algoosh cannot control network retention.

11) Security

We use reasonable administrative, technical, and organizational measures designed to protect information (e.g., encryption in transit, access controls, logging). However, no system is 100% secure, and we cannot guarantee absolute security.

12) Your rights and choices

A) EEA/UK/Switzerland rights

Depending on your location and applicable law, you may have rights to request:

access, rectification, deletion, restriction, portability, and objection;
withdrawal of consent (where processing is based on consent);
the right to lodge a complaint with a supervisory authority.

Important limitation: If information is stored on a public blockchain, deletion/erasure may not be technically feasible. We will honor deletion requests for off-chain data we control and will explain any limitations for on-chain data.

B) US privacy rights (including California, where applicable)

Depending on your state, you may have rights to:

know/access the categories and specific pieces of personal information collected,
delete personal information (subject to exceptions),
correct inaccurate personal information,
opt out of “sale” or “sharing” (as defined by law),
not be discriminated against for exercising your rights.

How to exercise rights: Contact us using the contact method provided on our website. We may request reasonable verification (including wallet-based verification where appropriate).

13) Cookies

Where required (e.g., in the EU/EEA), we present cookie choices and do not place non-essential cookies without consent. You can also manage cookies through your browser settings.

14) Children

The Services are not intended for children under 13. If you are under 16 in a jurisdiction where parental consent is required for certain processing, please use the Services only with appropriate permission. We do not knowingly collect personal information from children.

15) Third-party services and links

Wallet providers, blockchain explorers, and third-party sites you access from Algoosh have their own privacy practices. We are not responsible for their policies, content, or practices.

16) Changes to this policy

We may update this Policy from time to time. We will update the “Last updated” date and, where required, provide additional notice through the Services.

17) Contact

Questions or requests about this Privacy Policy or your information: Contact us using the contact method provided on our website.