Privacy Policy
Last updated: 16 March 2026
1. Introduction
Web3county Limited ("Volt Terminal", "we", "us", or "our") operates the Volt Terminal mobile application and website at voltterminal.com (collectively, the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights in relation to it.
By creating an account or using the Service, you confirm that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.
Web3county Limited is a company registered in England and Wales. For the purposes of UK GDPR and the Data Protection Act 2018, Web3county Limited is the data controller.
2. Information We Collect
2.1 Information You Provide Directly
| Data | When collected |
|---|---|
| First and last name | Account registration |
| Email address | Account registration, password/PIN resets |
| Password (stored as a one-way bcrypt hash — never in plain text) | Account registration |
| 6-digit PIN (stored as a one-way bcrypt hash) | PIN setup during onboarding |
| Telegram bot token and related configuration | Terminal creation (paid tiers) |
| Third-party RPC endpoint URLs | Terminal configuration (optional) |
| Referral code | Signup (optional) |
| Cryptocurrency wallet address (USDT/USDC on BSC or Solana) | Referral payout withdrawal requests |
2.2 Information Collected Automatically
| Data | Purpose |
|---|---|
| Push notification device token (Expo/APNs/FCM) | Delivering push notifications to your device |
| App version and device platform (iOS/Android) | Support, diagnostics |
| In-app activity (screens visited, features used) | Service improvement via AppsFlyer analytics SDK |
| Referral attribution data | Tracking referral source via AppsFlyer deep links |
| IP address (server logs) | Security monitoring, fraud prevention |
2.3 Information from Third Parties
- Stripe: When you subscribe to a paid plan, Stripe processes your payment. We receive a Stripe customer ID, subscription status, and billing interval. We do not receive or store your full card number — Stripe handles all card data under their own PCI-DSS-compliant infrastructure.
3. How We Use Your Information
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Creating and managing your account | Performance of a contract (Art. 6(1)(b)) |
| Authenticating your identity (email, password, PIN) | Performance of a contract (Art. 6(1)(b)) |
| Deploying and managing your terminal instances | Performance of a contract (Art. 6(1)(b)) |
| Processing subscription payments via Stripe | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails (email verification, password/PIN reset) | Performance of a contract (Art. 6(1)(b)) |
| Sending push notifications about terminal status, billing, and security | Legitimate interests (Art. 6(1)(f)) / consent where required |
| Tracking and paying out referral earnings | Performance of a contract (Art. 6(1)(b)) |
| Analytics and app improvement via AppsFlyer | Legitimate interests (Art. 6(1)(f)) |
| Security monitoring, fraud prevention, abuse detection | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
We do not sell your personal data to third parties.
4. Data Sharing and Sub-processors
We share your data only with the following third-party service providers, solely to operate the Service:
| Sub-processor | Role | Data shared | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing | Email, subscription data | USA (SCCs applied) |
| DigitalOcean, LLC | Cloud infrastructure (VPS hosting for paid terminals) | Terminal configuration, IP addresses | USA/EU (depends on region) |
| Cloudflare, Inc. | DNS and network routing | Domain/subdomain configuration | USA (SCCs applied) |
| Google LLC (Firebase) | Android push notifications (FCM) | Push device tokens | USA (SCCs applied) |
| Apple Inc. (APNs) | iOS push notifications | Push device tokens | USA (SCCs applied) |
| AppsFlyer Ltd. | Mobile analytics and referral attribution | Device identifiers, in-app events | Israel/USA (adequacy decision/SCCs) |
| MongoDB Atlas (MongoDB, Inc.) | Database hosting | All account and terminal data | EU/USA depending on configuration |
We require all sub-processors to process data only on our instructions and to maintain appropriate security measures.
We may also disclose your data if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of Web3county Limited, our users, or others.
5. Data Retention
| Data type | Retention period |
|---|---|
| Account data (name, email, hashed password, hashed PIN) | For the duration of your account, plus 30 days after account deletion |
| Terminal configuration and environment variables | Deleted immediately upon terminal deletion |
| Subscription and billing records | 7 years (UK legal/tax obligation) |
| Push notification tokens | Until you unregister or delete your account |
| Referral records and payout history | 3 years from last activity |
| Server access logs | 90 days |
| AppsFlyer analytics events | Per AppsFlyer's own retention policy (up to 2 years) |
When you delete your account through the app, we initiate immediate deletion of your personal data (subject to legal retention obligations noted above). Terminal infrastructure is deprovisioned within 24 hours.
6. Security
We implement appropriate technical and organisational measures to protect your data, including:
- All passwords and PINs are hashed using bcrypt before storage — we cannot recover them in plain text.
- All data in transit is encrypted via TLS/HTTPS.
- Sensitive credentials (e.g., Telegram bot tokens) are encrypted at rest using AES-256-GCM.
- Access to production systems is restricted to authorised personnel only.
No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
7. Cookies and Tracking
The Volt Terminal mobile app does not use browser cookies. However, we use the AppsFlyer SDK within the app to collect analytics and referral attribution data. AppsFlyer may use device identifiers (such as the advertising ID) in accordance with AppsFlyer's own privacy policy.
You can opt out of AppsFlyer tracking by adjusting your device's advertising settings (e.g., "Limit Ad Tracking" on iOS, "Opt out of Ads Personalisation" on Android).
8. International Data Transfers
Web3county Limited is based in the United Kingdom. Some of our sub-processors are located in the United States or other countries outside the UK. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) with relevant parties.
- Transfers to countries with an adequacy decision by the UK Secretary of State.
9. Children
The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at info@voltterminal.com and we will delete it promptly.
10. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data ("right to be forgotten") — available directly in the app via Settings → Delete Account |
| Restriction | Ask us to restrict processing of your data in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Where processing is based on consent, withdraw it at any time without affecting prior lawful processing |
To exercise any of these rights, contact us at info@voltterminal.com. We will respond within one month of receiving your request.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority — at ico.org.uk or by calling 0303 123 1113.
11. Push Notifications
We send push notifications to inform you about terminal status changes, billing events, security alerts, and system updates. You can manage your notification preferences at any time within the app under Settings → Notification Preferences, or by disabling notifications entirely through your device's system settings.
12. Account Deletion
You may delete your account at any time through Settings → Delete Account in the app. Upon deletion:
- Your personal data is removed from our active systems within 30 days.
- All terminals associated with your account are permanently deleted and deprovisioned.
- Billing records are retained for 7 years as required by UK law.
- Referral records are retained for 3 years.
Deletion is permanent and irreversible.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you via push notification or email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Web3county Limited Email: info@voltterminal.com Website: https://voltterminal.com
This Privacy Policy is governed by the laws of England and Wales.