This policy explains how TonRamp, operated by IaCrypto, handles personal data of people who use the Telegram Mini App, the payment checkout and the partner console. By using the service you acknowledge that you have read this document.
1. Controller
The controller is IaCrypto, operator of TonRamp. Privacy and data-subject requests:suporte@tonramp.io.
2. Data we collect
- Telegram identifiers (including telegram_id, name and username when the Mini App sends them).
- Tax ID (CPF or equivalent) and full name when you pay or complete KYC.
- Phone, email and PIX key when you provide them at signup or payment.
- Connected TON wallet address (TonConnect) and on-chain balances used to quote the order.
- Identity documents and liveness collected by the KYC provider (Sumsub); we do not store those files in the Mini App.
- Transaction data: amounts, status, PIX identifiers, partner tx_id and timestamps.
- Minimal technical data: IP address, user-agent and access audit logs.
- On the partner console: email, role (owner/operator), 2FA and webhook settings.
3. Why we use it
- To run buy, sell, top-up and checkout (contract).
- To verify identity and meet anti-money-laundering and counter-terrorist-financing duties (legal obligation).
- To detect fraud and abuse (legitimate interest and legal obligation).
- To notify the merchant of their order status, without sending your full KYC file.
- Support and operational email (suporte@tonramp.io).
4. Who we share with
- KYC provider (Sumsub), for identity verification.
- PIX and payment infrastructure, to issue and settle charges.
- Cloud processors (hosting, queues, email) under a processing contract.
- The merchant that originated the order: status, amounts and transaction identifiers — not the full KYC document pack.
- Authorities when the law requires it.
We do not sell personal data.
5. How long we keep it
We keep data while the account is active and for up to five (5) years after closure, aligned with the Terms of Use and financial-crime record duties. Technical logs have a shorter life unless they must evidence a transaction.
6. Your rights
You may request confirmation of processing, access, correction, anonymisation, portability and information about sharing, atsuporte@tonramp.io. Erasure may be refused or delayed when the law requires retention (for example, a financial operation record).
7. International transfers
Some processors (KYC, cloud) may handle data outside Brazil. We require contractual safeguards compatible with the LGPD.
8. Security
We use HTTPS, access control, encryption of secrets at rest and audit logs. No system is risk-free; material incidents will be notified as required by law.
9. Children
The service is for people 18 or older. We do not knowingly collect data from minors.
10. Changes
Material changes will be published on this page with a new effective date. Continued use after publication means you are aware of the current version.
11. Terms of use
This policy complements theTerms of Use (English)shown in TonConnect for international buyers, and thePortuguese version.