Privacy Policy
Effective date:
1.Who We Are
AMLChain FZ-LLC, operating as AMLchain, is responsible for the personal information processed in connection with our services: wallet screening through our WhatsApp channel, the AMLchain Risk API, and the AMLchain app for ChatGPT. Registered address: Expo City Dubai Free Zone, Dubai, UAE. Privacy contact: [email protected]
2.Information We Collect
WhatsApp service: your WhatsApp phone number, the wallet addresses you submit, and the messages you send us about the service.
API and ChatGPT accounts: your email address; your password, which we store only as a one-way cryptographic hash and never in readable form; your API keys and the sign-in tokens used to connect ChatGPT to your account, which we also store only as hashes; the wallet addresses you submit and the results returned; and your credit and usage history (credits added, checks run, and payment references for top-ups).
Security information: when you use the API or the sign-in page, we process your IP address to protect the service, for example to limit repeated sign-in attempts and sign-ups. In our account database we keep only a keyed hash of the IP address, not the address itself. Our web server logs record the IP address, request method, page path and response status, and are kept for 14 days.
We do not request passports, identity documents, private keys or wallet recovery phrases. Our analysis also uses publicly available blockchain information linked to the submitted wallet address.
3.Why We Use Information
We use this information to provide the screening you request and deliver reports; to create and secure your account and connect it to ChatGPT at your request; to keep an accurate record of credits and usage; to prevent fraud and abuse of the service; to communicate with you and provide support; and to meet our legal obligations. We process information as necessary to provide the requested service, for our legitimate interest in keeping the service secure, on the basis of consent where required, or to comply with the law.
4.Who Receives Information
Blockchain analytics providers: to produce a report, the submitted wallet address is shared with third-party blockchain analytics and blockchain data providers. We do not send them your phone number, email address or password.
AI processing provider: generated reports are processed by an AI processing provider to produce a written summary.
OpenAI: if you use the AMLchain app in ChatGPT, OpenAI processes your ChatGPT conversation, including the wallet addresses you enter and the results we return to ChatGPT, under OpenAI’s own privacy policy. We receive only what the app needs to run a check and show your credit balance. We do not receive your ChatGPT conversation history.
Messaging provider: communications through WhatsApp are processed by WhatsApp under its own privacy terms.
Hosting, content delivery and security providers: our servers and our content delivery and security provider (Cloudflare) process network traffic, including IP addresses, to deliver and protect our websites and API.
Each of these providers processes the data it receives under its own terms and retention policies. We do not sell personal information. Information may also be disclosed where required by applicable law or a valid request from a competent authority.
5.Retention
Screening reports and check records are kept for as long as necessary to provide the service, including re-delivering reports and answering questions about past checks, to keep our business records, and to meet legal obligations. They are not currently deleted on a fixed schedule. Some internal working records are deleted automatically sooner; for example, web server logs are kept for 14 days.
Account information (email address, hashed password, hashed keys and tokens) is kept while your account exists. Credit and payment records are kept for as long as your account holds a balance, and afterwards for as long as needed for our legitimate business and legal purposes.
You can ask us to delete reports you requested or to close your account; see Section 7. Deleting a copy on our server does not remove public blockchain records, copies already delivered to you, or data held by the providers described in Section 4 under their own policies.
6.International Processing
Some of the providers described in Section 4, including OpenAI, process personal information outside the UAE. Where this occurs, we rely on the providers’ own applicable safeguards for international data transfers.
7.Your Rights
Subject to applicable law, including the EU and UK General Data Protection Regulation where it applies, you may request access to your personal information, its correction, or its deletion. You may also ask us to restrict or object to certain processing, request a copy of your data in a portable format, and withdraw consent where processing relies on consent. You can disconnect AMLchain from ChatGPT at any time in your ChatGPT settings. To make a request, contact us using the privacy contact above. We may need to verify your identity, for example by contacting you from the email address or WhatsApp number on your account. We may keep records we are legally required to keep, such as payment records. You may also complain to a data protection authority.
9.Updates
We may update this Privacy Policy to reflect changes to our services or data practices. The current version and effective date will be published on our website.