Sign in
KOCRELAY / Privacy Policy

Your information. Handled with care.

What KOCRelay collects when you sign in, top up and place orders, who it is shared with, and your choices.

Last updated: October 13, 2026

This Privacy Policy explains what personal data KOCRelay ("we") collects when you use the KOCRelay website and workspace, how we use and share it, and the choices you have.

01

Information we collect

Account and sign-in

  • Email sign-in: your email address and password. We store only a one-way hash of your password, never the password itself. We send verification codes to your email address when you sign up, reset your password or add an email address to your account.

  • Google sign-in: when you sign in with your Google account, we receive your Google account ID, email address, name and profile picture. We never see your Google credentials.

  • Wallet sign-in: when you sign in with a crypto wallet, we store your wallet address. You confirm that the wallet is yours by signing a message in your wallet app; we never receive your private key or recovery phrase.

  • Preferences: your interface language and time zone.

  • Sign-in records: IP address, browser user agent, sign-in method and time.

Orders and content

  • The content you submit for publishing, such as post copy, titles and images.

  • The platform, package and quantity you choose, and the delivered post links and review status.

Payments and wallet

  • Top-up records: amount, currency, payment method and status, plus the reference returned by the payment provider — for example a Binance Pay order ID, a Cryptomus invoice with the blockchain transaction ID and network, a Shopify order number, or a TON transaction hash and the sending wallet address.

  • For card payments, we pass your email address to Shopify to prefill checkout. We keep the payment notifications Shopify sends us, which may include your billing name, email, address, phone number, IP address, and the card brand and last digits. We never receive the full card number.

  • We also keep the notifications other payment providers send us, such as the Binance Pay payer ID.

  • Your wallet balance, transaction history, coupons and invite relationships.

Agent program

  • If you apply to become an agent: your questionnaire answers and the review result.

  • Commission records and, for withdrawals, the USDT (BEP20) receiving address, amount and on-chain transaction hash.

02

How we use your data

Provide the service
Sign you in, create, deliver and settle your orders, and manage your wallet.
Process payments
Confirm top-ups with payment providers and detect duplicate, reversed or disputed payments.
Security
Use sign-in records to protect accounts and prevent abuse.
Support
Look into questions about your orders, wallet or account.
Analytics
Understand how the site is used and improve it (see “Analytics”).

Where the GDPR applies, we rely on the performance of our contract with you, our legitimate interest in running a secure service, and our legitimate interest in understanding how the service is used, and compliance with legal obligations.

03

Who we share it with

We do not sell your personal data. We share it only as needed to run the service:

  • Publishers: the content you submit and the task requirements are shown to the independent publishers who take on your order. Publishers do not see your account details or email address.

  • Social platforms: the content you order is published publicly on Binance Square or X.

  • Google, if you sign in with Google.

  • Resend, our email provider, which delivers verification codes and other account emails to your email address.

  • Cloudflare Turnstile, which receives your IP address and browser details to check that email sign-up, sign-in and verification-code requests come from a person.

  • Reown (WalletConnect), if you choose to connect your wallet through its connection window; it relays the connection between your wallet app and KOCRelay.

  • Google Maps, only if you click “Show map” on the Contact page. Google then receives your IP address and browser details and its own privacy policy applies. Without that click the page makes no request to Google Maps.

  • Payment providers you choose: Binance Pay, Cryptomus, Shopify (card payments; we pass your email address to prefill checkout) and the TON network, reached through TON Connect and your wallet app. Blockchain transactions are public by design.

  • Analytics providers: Google Analytics and Microsoft Clarity.

  • Hosting, file storage and delivery providers that run the service for us. Images you upload are stored at public addresses so publishers can use them.

  • Authorities, where the law requires it.

04

Local storage and cookies

  • The workspace keeps you signed in with a token in your browser’s local storage. It also stores your language, an invite code you arrived with, draft orders (including the post content you entered), the last withdrawal address you used, TON payments waiting for confirmation, and which coupons and rewards you have already seen. The TON Connect library keeps its own wallet connection data.

  • In session storage, the workspace keeps where to return after sign-in and a short-lived note while a payment is open, so it can pick up where you left off.

  • Google Analytics and Microsoft Clarity set their own cookies when they are loaded. The workspace also keeps a list of top-ups started in this browser (at most 20, for up to 7 days) so each completed payment is counted once.

  • You can clear this data in your browser settings at any time. Clearing the sign-in token signs you out.

05

Analytics

  • Google Analytics 4 records page views and key actions, such as starting sign-in, starting a top-up, the amount of a completed top-up and placing an order. Event data does not include order numbers, your email address or your account ID, but the page addresses recorded with page views may include internal order IDs, for example when you open an order.

  • Microsoft Clarity records how pages are used, including session replays and heatmaps. In the workspace, page content is masked in these recordings, so your drafts, balance and account details cannot be read in them.

  • Neither tool is started while the address bar contains a sign-in token or a payment reference, and payment checkout links are not placed on the page.

  • You can block these tools with your browser settings or a content blocker.

06

How long we keep data

Account data
For as long as your account exists. You can ask us to close your account and delete your data (see “Your rights”).
Payment and wallet records
For as long as needed for accounting, dispute handling and legal obligations.
Sign-in records
Currently kept while your account exists, for security purposes.
07

Your rights

Depending on where you live, you may:

  • access the personal data we hold about you and receive a copy;

  • correct inaccurate data;

  • ask us to delete your data, where we are not required to keep it;

  • object to or restrict certain processing;

  • ask us to close your account.

To make a request, contact us through the channels on our Contact page and write from the email address linked to your account (if you only sign in with a wallet, include your wallet address). We may need to confirm that the request comes from the publisher.

08

Security

We protect data with encrypted connections and access controls. No system is completely secure. Anyone who controls your email and password, Google account or wallet can sign in to your KOCRelay account, so keep them protected.

09

International transfers

KOCRelay serves users worldwide, so your data may be processed in countries other than your own. Where the GDPR applies, we use appropriate safeguards for these transfers.

10

Children

KOCRelay is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has given us data, contact us and we will delete it.

11

Changes to this policy

We may update this policy. The date at the top shows the latest version.