Privacy Policy

1. Introduction

This Privacy Policy explains how ITRocket ("ITRocket", "we", "our", or "us") collects, uses, stores, and protects information when you use CC Space and other services operated by ITRocket (collectively, the "Services").

We do not sell personal information or use it for advertising. CC Space collects only what is reasonably necessary to operate the platform, provide wallet-related functionality, alerts, APIs, subscriptions, and keep the Services secure.

Please read this Policy carefully to understand how we handle your information.

2. What This Policy Covers

This Policy applies to CC Space websites, domains, APIs, accounts, subscriptions, dashboards, alerts, integrations, wallet-related functionality, and support communications.

This Policy does not apply to third-party websites, services, or applications that you may access through links or integrations in the Services.

3. Information We Collect

We collect only the information reasonably necessary to provide, secure, maintain, and improve the Services.

Account Information

When you create an account or subscribe to the Services, we may collect your email address, username or account identifier, authentication provider information (for example, Google sign-in), subscription status, and communication preferences.

Passwords, where used, are stored only in salted, hashed form and are never accessible to us in plain text.

Wallet Information

CC Space may provide access to a non-custodial wallet.

When a wallet is created, a private key may be displayed to the user for backup purposes, and the user may be given the option to download a backup file containing the key.

ITRocket does not store, retain, or have access to users' private keys, seed phrases, recovery keys, downloaded backup files, or other wallet credentials. We cannot initiate, approve, reverse, recover, or otherwise control transactions on behalf of users.

Users are solely responsible for securely storing their private keys and maintaining access to their wallets. Loss of these credentials may result in permanent and irreversible loss of wallet access.

To provide wallet-related functionality, we may store and process public wallet addresses, party identifiers, wallet-related account identifiers, and wallet connection status.

Transaction Information

We may store and process information related to transactions performed through the Services, including:

• On-chain transaction references;
• Service usage records;
• Credit balances;
• Transaction history;
• Related operational information necessary to provide the Services.

Transaction records may be retained for accounting, security, operational, and compliance purposes.

Notification and Integration Information

To provide alerts, notifications, and integrations, we may store and process:

• Notification destinations;
• Messaging identifiers;
• Bot credentials;
• Routing keys;
• Webhook URLs;
• Integration settings;
• Delivery preferences;
• Routing and escalation configurations;
• Notification history and delivery status information.

Such information is used solely for delivering notifications, alerts, and service-related communications requested by the user.

Technical Information

We may automatically collect technical information such as IP address, browser type and version, device and operating system information, access timestamps, error logs, diagnostic information, and security or fraud-prevention data.

Service Usage Information

We may collect information relating to your use of the Services, including alert configurations, dashboard preferences, API usage statistics, API key metadata, service activity logs, support requests and communications, feature usage, and performance metrics.

Blockchain Data

CC Space indexes and displays publicly available blockchain information.

Blockchain addresses, transactions, validator information, governance activity, smart contract data, and other on-chain records are publicly accessible by design and may be displayed, analyzed, or processed by the Services.

Such data originates on public blockchain networks, is not created by us, and generally cannot be altered or deleted by ITRocket.

4. How We Use Information

We use information to:

• Operate, maintain, and improve the Services;
• Manage accounts and subscriptions;
• Deliver alerts, notifications, and communications;
• Operate APIs and platform functionality;
• Prevent abuse, fraud, spam, and unauthorized access;
• Respond to support requests;
• Comply with legal obligations;
• Protect the rights, property, and security of ITRocket and its users.

5. Legal Bases for Processing

Where applicable data protection laws require a legal basis for processing, we rely on the following bases depending on the processing activity:

• Performance of a contract - to provide accounts, access to non-custodial wallet functionality, subscriptions, credit conversions, alerts, and API access;
• Legitimate interests - to secure, maintain, and improve the Services and prevent fraud, abuse, and unauthorized access, balanced against your rights;
• Consent - for optional analytics, telemetry, or non-essential cookies, where introduced, withdrawable at any time;
• Compliance with legal obligations - for accounting, tax, legal, and record-keeping purposes.

6. Information Sharing

We do not sell personal information.

We may share information only:

• with service providers and processors assisting in operating the Services, such as hosting, authentication, email delivery, notification platforms, analytics, and infrastructure providers;
• with third-party services you choose to connect or use through the Services;
• to comply with applicable laws, regulations, court orders, or lawful requests;
• to protect the security, integrity, and operation of the Services;
• to enforce our agreements and policies;
• in connection with a merger, acquisition, restructuring, financing, or sale of assets, under equivalent protections.

We do not share personal information for advertising or cross-site marketing.

7. Third-Party Services

The Services may integrate with third-party providers, including authentication services, communication and messaging platforms, notification services, wallet software, analytics tools, and blockchain infrastructure providers.

When users configure such integrations or use features that rely on them, certain information may be transmitted to the selected provider solely for the purpose of providing the requested functionality.

Third-party services operate under their own terms and privacy policies, and ITRocket is not responsible for their privacy practices.

8. Cookies and Local Storage

We use cookies and similar browser storage technologies, including local storage, only where reasonably necessary to operate the Services.

This may include maintaining authenticated sessions, remembering user preferences, storing locally encrypted wallet material where enabled by the user, and retaining limited local application state.

Any optional analytics or telemetry, if introduced in the future, will be disabled by default unless you provide consent.

You can manage or block cookies through your browser settings, although doing so may affect certain Service functionality.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy.

Typical retention periods include:

• Account and configuration data while your account remains active and for a reasonable period after account deletion;
• Server, security, and diagnostic logs, typically 30–180 days;
• Notification and delivery history while subscriptions remain active and for a limited period thereafter;
• Transaction and accounting records as required by applicable law;
• Support communications, typically up to 24 months.

Information that is no longer required may be deleted, anonymized, or aggregated.

Public blockchain data may remain permanently available on the relevant blockchain network and cannot be removed by ITRocket.

10. Security

We implement reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include encryption in transit, access controls, logging, monitoring, and least-privilege access practices.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. International Data Transfers

Your information may be processed and stored in countries where ITRocket or its service providers operate.

Where required by applicable law, appropriate safeguards will be implemented for international transfers.

By using the Services, you acknowledge that information may be transferred across international borders.

12. Your Rights

Depending on applicable law, you may have the right to:

• Access personal information about you;
• Correct inaccurate information;
• Request deletion of personal information;
• Object to or restrict certain processing activities;
• Withdraw consent where applicable;
• Request a copy of your personal information.

Requests may be submitted through our support channels.

13. Children's Privacy

The Services are intended for users aged 18 or older. We do not knowingly collect personal information from individuals under 18.

If we become aware that a minor has provided personal information, we will take reasonable steps to delete it, unless retention is required by law. Please contact us through our support channels if you believe this has occurred.

14. Contact Information

For questions regarding this Privacy Policy, our data practices, or to exercise your rights, please contact: [email protected]

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be published on this page with a revised "Last Updated" date and, where appropriate, additional notice within the Services.

Continued use of the Services after an update constitutes acceptance of the revised Policy.