Privacy policy

Account data: email, name, business information you provide. Payment data: on-chain transaction data (addresses, amounts, assets, transaction identifiers), payment metadata you attach (order identifiers), and screening results. Technical data: logs, device and usage data, cookies (see the Cookie Policy).

To provide the service (creating payments, crediting balances, executing withdrawals); to meet compliance obligations (AML and sanctions screening of every incoming transaction, pattern monitoring, record-keeping); to secure the service (fraud and abuse prevention, access control); to communicate with you (service messages, replies to your requests).

For Extended screening, transaction data is processed by independent blockchain-analytics providers under contractual safeguards. On-chain data is, by its nature, public.

We share data with service providers under contract, with authorities where the law requires it, and in corporate transactions as permitted by law. We do not sell personal data.

Payment and screening records are retained as long as required by financial-compliance law; account data — for the life of the account and any legally required period after.

Depending on the law that applies to you, you may have the right to access the personal data we hold about you, to correct or delete it, to restrict or object to its processing, and to receive a portable copy. Send requests to payments@suward.com; we answer within the time applicable law sets. One limit is technical rather than legal: data recorded on public blockchains is public by nature and cannot be erased from them — where erasure applies, we stop associating that data with your account instead.

We secure account access with password hashing, optional two-factor authentication, and role-based permissions for team members you invite. API keys are shown once at creation, can be rotated or revoked instantly, and are scoped to a single project, so a leaked key's blast radius stays contained. Webhook payloads we send you are signed with Ed25519 so you can verify they came from Suward before acting on them. [TO CONFIRM: any third-party security audits or certifications to disclose here — not stated in current source material]

Material changes are announced on this page and, for account holders, by email or dashboard notice.