Privacy Policy

1. Information We Collect

1.1 Account Information: When you register for an account, we collect your name, company name, email address, phone number, billing details, and account credentials.

1.2 Verification Data: For license activation, your account is permanently bound to your registered email and verified phone number. These details cannot be changed once activated.

1.3 Payment & Transaction Data: We collect information necessary for billing and payment processing, such as invoices, subscription details, and payment confirmations.

1.4 Usage & Technical Data (SaaS and Self-Hosted): We may collect IP addresses, browser type, operating system, device identifiers, server environment details, license keys, domain names, telemetry data, and usage logs for:

• license validation
• security monitoring
• abuse prevention, and
• product improvement.

1.5 Customer Data (SaaS only): When you use our hosted services, we process data you upload, store, or manage (including customer names, orders, payment data, and other e-commerce content).

1.6 Cookies & Tracking Technologies (Website & SaaS): We may use cookies, pixels, and similar technologies to authenticate users, store preferences, analyze usage, and deliver relevant communications.

2. MarutiX Pay (Crypto Payment & Gateway Aggregation Services)

2.1 MarutiX Pay is a payment orchestration and gateway aggregation platform provided by MarutiX. MarutiX Pay enables merchants to integrate, manage, and route multiple payment methods, blockchain networks, and third-party payment gateways through a unified interface.

2.2 Merchants using MarutiX Pay may connect their own third-party payment service provider accounts, including cryptocurrency gateways and traditional payment providers (such as PayPal, Stripe, Binance Pay, or similar services), by supplying their own API keys, credentials, or configuration details. MarutiX does not issue, own, operate, or control merchant accounts with such third-party providers.

2.3 For cryptocurrency payments, MarutiX Pay operates as a non-custodial blockchain payment infrastructure. MarutiX does not store, control, manage, or have access to users’ private keys, wallet credentials, seed phrases, or digital assets. All crypto payments are executed directly on public blockchain networks via smart contracts or merchant-provided wallet addresses.

2.4 MarutiX does not process, custody, intermediate, pool, or settle funds on behalf of merchants or customers. Payment transactions are processed directly by the connected third-party payment providers or public blockchain networks according to the merchant’s configuration.

2.5 Transactions initiated through MarutiX Pay may occur on public blockchain networks or third-party payment systems. Blockchain data, including wallet addresses and transaction hashes, is publicly accessible, immutable, and maintained independently of MarutiX. MarutiX does not control, modify, delete, or obscure blockchain records or third-party payment transaction data.

2.6 For operational, reconciliation, analytics, and support purposes, MarutiX may collect and store limited transaction-related metadata, including payment status, selected payment method, timestamps, blockchain network, transaction hash, and internal merchant reference identifiers. MarutiX does not store private keys, payment card data, or sensitive financial credentials.

2.7 MarutiX Pay utilizes automation logic and, where applicable, smart contracts to route payment requests based on merchant-defined rules. Payment transactions, once initiated or confirmed, may be irreversible. Merchants and customers are solely responsible for verifying payment details, wallet addresses, blockchain networks, and third-party provider configurations prior to initiating payments.

2.8 MarutiX provides MarutiX Pay as a software and infrastructure service only. MarutiX does not operate as a financial institution, payment service provider, money service business, or virtual asset custodian. Compliance with applicable laws, regulations, and third-party provider terms remains the responsibility of the merchant.

3. How We Use Information

3.1 To deliver, operate, maintain, and improve our Software, products, and services, including ensuring reliable performance and availability.

3.2 To verify licenses, enforce account binding, prevent unauthorized access or misuse, and protect the integrity of our systems.

3.3 To process subscriptions, service renewals, billing-related activities, and access to paid features, in accordance with applicable terms.

3.4 To provide customer and technical support, respond to inquiries, troubleshoot issues, and communicate service-related information.

3.5 To analyze usage patterns, monitor performance, and improve functionality, features, reliability, and security of our Software and services.

3.6 To comply with applicable legal and regulatory obligations, including export control laws, sanctions regulations, and lawful requests from authorities.

3.7 To send service-related communications, product updates, and marketing messages where permitted by law, with appropriate opt-out mechanisms available.

4. Self-Hosted Deployments

4.1 In the case of Self-Hosted deployments, you act as the sole data controller for all customer, transaction, and operational data stored, processed, or managed on your own servers or infrastructure.

4.2 MarutiX does not have access to, visibility into, or control over data stored in Self-Hosted environments and bears no responsibility for data protection, privacy compliance, security controls, system configuration, or backup management related to such deployments.

4.3 You are solely responsible for ensuring compliance with all applicable data protection, privacy, and security laws and regulations, including but not limited to GDPR, CCPA, and other local or international requirements, when operating Self-Hosted versions of the Software.

4.4 Upon expiration or termination of support, maintenance, or subscription services, MarutiX is not obligated to provide continued access to downloads, updates, patches, or data copies. You are responsible for securely retaining, maintaining, and backing up your last obtained version of the Software and any associated data.

5. Sharing of Information

5.1 MarutiX may share information with trusted third parties strictly for the purposes described in this Privacy Policy and only to the extent necessary to provide, operate, and support our Software and services.

5.2 Payment Processors: For billing, invoicing, subscription management, and related financial operations. MarutiX does not share cryptocurrency private keys or wallet credentials with payment processors.

5.3 Hosting Providers (SaaS Deployments Only): Cloud infrastructure and hosting service providers (such as AWS, GCP, or similar platforms) used to operate and maintain our SaaS services.

5.4 Service Providers: Third-party vendors that support our operations, including analytics, monitoring, email delivery, SMS communications, customer support systems, and related tooling.

5.5 Legal and Compliance Authorities: Where required to comply with applicable laws, regulations, legal processes, enforce this Agreement, protect our rights, or respond to lawful requests from competent authorities.

5.6 MarutiX does not sell, rent, or trade personal data to third parties for marketing or commercial purposes.

5.7 MarutiX engages vetted third-party sub-processors solely to support service delivery. A current list of sub-processors is available upon request and may be updated from time to time.

6. Data Retention & Deletion

6.1 Account-related information is retained for as long as your account remains active and thereafter for the duration required to comply with applicable tax, legal, accounting, or regulatory obligations.

6.2 For SaaS deployments, customer data is retained for the duration of your active subscription. Upon account termination or subscription cancellation, such data may be permanently deleted within thirty (30) days, unless retention is required by law.

6.3 For Self-Hosted deployments, all data storage, retention, backups, and deletion are entirely your responsibility. MarutiX does not store, process, or back up Self-Hosted data and has no access to such data.

6.4 Requests for deletion of account-related data will be honored where technically feasible and legally permissible within thirty (30) days.

6.5 You may request deletion of your account data by contacting us at privacy@marutix.com.

7. Security

7.1 MarutiX implements reasonable and industry-standard technical and organizational security measures designed to protect information from accidental loss, unauthorized access, disclosure, alteration, or destruction.

7.2 While MarutiX takes appropriate measures to safeguard data, no system, network, or transmission method can be guaranteed to be completely secure. You are responsible for maintaining the security of your own devices, accounts, credentials, access controls, and backups.

7.3 For Self-Hosted deployments, you are solely responsible for the security, configuration, monitoring, patching, and protection of your infrastructure, systems, networks, and data. MarutiX has no responsibility for security incidents or breaches occurring within Self-Hosted environments.

7.4 Access to MarutiX internal systems is restricted to authorized personnel subject to strict confidentiality obligations.

7.5 MarutiX periodically reviews and updates security practices to address evolving operational and cyber threats.

7.6 In the event of a security incident affecting data under MarutiX's control, MarutiX will investigate, mitigate, and notify affected parties where legally required.

7.7 MarutiX is not responsible for vulnerabilities or incidents arising from third-party services, blockchain networks, or integrations used through MarutiX products.

7.8 You acknowledge that blockchain-based transactions occur on decentralized networks outside of MarutiX's control and that risks inherent to such networks are not the responsibility of MarutiX.

8. International Data Transfers

8.1 MarutiX operates and provides its services globally. Information may be processed, stored, or accessed in jurisdictions outside your country of residence.

8.2 By using our services, you expressly acknowledge and accept that information may be transferred to, processed in, and stored in jurisdictions with different data protection standards.

8.3 Where required by law, MarutiX implements appropriate safeguards, including Standard Contractual Clauses, for cross-border data transfers.

8.4 By using our services, you explicitly consent to international transfers of information as described herein.

8.5 MarutiX shall not be liable for any disclosure resulting from lawful regulatory requests in jurisdictions where data is processed.

9. Your Rights

9.1 Subject to applicable laws (including GDPR and CCPA), you may have rights to access, correct, or delete personal data, restrict processing, or request data portability.

9.2 MarutiX reserves the right to verify your identity before processing requests and may refuse requests that are manifestly unfounded or repetitive.

9.3 Certain data may be retained where required by law, accounting regulations, dispute resolution, or fraud prevention.

9.4 MarutiX cannot modify or delete data recorded on public immutable blockchain networks or third-party gateways.

9.5 Requests must be submitted in writing to privacy@marutix.com.

10. Children’s Privacy

10.1 MarutiX services are strictly intended for individuals aged eighteen (18) or older. We do not knowingly collect personal data from minors.

10.2 If we become aware that data from a minor has been collected, we will take prompt steps to delete such information.

11. Legal Basis for Processing (GDPR)

11.1 We process personal data under lawful bases: Contractual Necessity, Legitimate Interests, Compliance with Legal Obligations, and Consent.

11.2 We comply with applicable international standards, the Digital Personal Data Protection Act, and GDPR where applicable.

12. Changes to This Policy

12.1 MarutiX reserves the right to update this Privacy Policy at any time.

12.2 Updates become effective immediately upon posting to this website.

12.3 Your continued use of our software or services constitutes acceptance of revised terms.

13. Contact Information

For questions or requests regarding this Privacy Policy, please contact our legal desk:

14. Law Enforcement & Government Requests

14.1 MarutiX may disclose information where required by court order, subpoena, valid governmental request, or applicable law.

14.2 MarutiX retains sole discretion to determine the validity of legal requests and will notify users only where legally permitted.

15. Compliance with Laws

15.1 You warrant that you will not use MarutiX software or services in violation of applicable laws, international trade sanctions, or export control regulations.

15.2 MarutiX reserves the right to suspend or terminate services immediately without liability to comply with sanctions and trade compliance laws.

16. Governing Language

16.1 This Privacy Policy is authored and governed in the English language.

16.2 Any translations are for convenience only. In the event of any conflict, the English version shall prevail and be binding.