Privacy Policy
Effective date: 24 August 2026
This policy explains how Ruitu E-commerce Limited (睿途電子商務有限公司), as the operator of XA Access, handles information related to this site.
1. Data we process
| Data | Purpose |
|---|---|
| Public wallet address, network, asset | Creating the funding session and showing transaction status |
| Amount, currency, order status, transaction hash | Reconciliation, support, security auditing and dispute handling |
| Email address, if you provide one | Pre-filling the provider flow and sending order notifications |
| IP address, timestamp, request path | Regional compliance, fraud prevention, rate limiting and troubleshooting |
2. Data we do not collect
- Private keys, seed phrases or wallet passwords;
- Full payment card details;
- Identity documents and facial images, which are collected directly by the third-party provider.
3. Third-party providers and public IP lookup services
Once you enter a third-party provider's pages, identity verification, payment and compliance data are handled independently by that provider under its own privacy policy. We pass the destination wallet, order parameters, your email address (if provided) and your real IP address to the selected provider, to the extent needed to complete the transaction. Available providers may currently include Transak; the provider actually used is the one shown on the confirmation page.
To show regional availability — and, when debugging on localhost against staging, to follow the browser's VPN egress — your browser contacts public IP lookup services directly. In production, the user's IP is taken from the controlled server connection or a trusted proxy, never from an IP submitted by the browser.
4. Wallet connection
Connecting MetaMask requests only your public account address. It does not request transaction signatures or on-chain approvals, and does not read private keys. Your browser's local storage may hold order IDs issued by this site so you can check their status on this device.
5. Retention and security
Transaction and security records are retained as required by applicable law and business need. We apply transport encryption, access control, key isolation, webhook signature verification and audit logging.
6. Your rights and contact
You may request access to or correction of the personal data we hold about you. Transaction and security records that we are legally required to retain may not be deletable immediately. Contact admin@teapot-shop.com.