Privacy Policy

Last updated: June 16, 2026.

1. Introduction & Core Principles

Recovalet ("we", "us", or "our") values the privacy and cryptographic secrecy of our users. This Privacy Policy governs all sites, APIs, desktop client interactions, and distributed database services operated by Recovalet.

We operate under a strict **Zero-Knowledge design philosophy**. The primary computing operations performed on client systems—including keyspace segment scans, local address matching, and seed derivations—run exclusively on the client's physical hardware. Private candidate keys are never transmitted to our central database or logging endpoints, ensuring complete data ownership by the user.

2. Information We Collect

To authorize dashboard features, facilitate payments, and handle referral commissions, we collect specific categories of metadata:

  • Account Registration Details: Email address, hashed password (using secure bcrypt routines), and displayName.
  • Network Telemetry: Anonymized connection metadata including IP-derived country, browser type, User-Agent strings, and navigation path tracking logs.
  • Payment & Transaction Details: In-bound deposit addresses, payment hashes, transaction statuses, and cryptocurrency amounts.
  • Refund Processing Data: External wallet addresses provided by clients to receive refunds under our 30-Day Money-Back Guarantee policy, along with support ticket descriptions.

3. Cookies & Attributed Tracking

Our web application utilizes security and attribution cookies to ensure session stability and calculate partner commissions:

  • Authentication Cookies: Secure cookies generated upon login to verify identity and encrypt communication tokens.
  • Referral & Partner Cookies: Used to attribute referral codes to professional affiliate partners. These cookies are stored on client browsers for up to 12 months unless cleared manually.

4. Data Retention, Refund Processing, & 30-Day Guarantee

Under our corporate policies, we guarantee a **30-Day Money-Back Refund Policy** for all client subscription tiers. To execute a refund successfully:

We retain transaction records, including the client's invoice ID, original payment hash, and refund destination wallet address, strictly to comply with corporate financial audits and prevent double-spending exploits. Once a refund is completed, these transaction logs are isolated and archived under strict data encryption protocols.

Refund requests can be submitted via `[email protected]`. All data related to the refund is wiped from active web-facing database clusters within 90 days of complete session cancellation.

5. Security Infrastructure & Local Cryptography

Recovalet employs robust industry standards to secure accounts and system telemetry:

  • Transport Security: Strict HTTPS transport layers encrypting all database calls and API endpoints.
  • Memory Isolation: Desktop candidate key matching calculations execute in transient RAM, ensuring zero data leakage to solid-state or secondary storage hardware.

6. User Rights & Deletion

Clients retain full authority over their personal metadata. You have the right to request a complete export of your platform record, or demand total deletion of your user account profile and referral telemetry. To request profile deletion, contact us at `[email protected]`.