Privacy notice.

What we collect, why, how long we keep it, and the levers you can pull. No marketing tracking on this site.

Who we are

TxShield is operated by Grundlabs (Inh. Hakob Chobanyan), Dieckerhofsweg 38, 58239 Schwerte, Germany. Email: privacy@txshield.dev.

Grundlabs is the controller for the data described on this page: website visits, your account, billing, email and logs.

Your organisation may submit transactions, wallet addresses or screening queries to the API. We process those, and the results we store for you, on your organisation's behalf. For that data your organisation is the controller and we are its processor (Art. 28 GDPR).

What we collect

This split is deliberate — the public marketing site and the API are very different surfaces.

On txshield.dev (this website)

• No third-party analytics. No Google Analytics, no Plausible, no tracking pixels.
• Traffic statistics. We record each request with the IP address and an approximate location derived from it, for traffic statistics, and delete it after 90 days.
• One localStorage entry — txshield-landing-theme — to remember your light/dark preference. You can clear it any time from your browser.
• Web server logs. IP address, browser, path, referring page, status and the country derived from the IP are kept 92 days for security (Art. 6(1)(f) GDPR), then deleted. Not joined to anything else.

On the API

• Simulation history. We process the transaction you submit to simulate it. We store each simulation's transaction hash, result and risk level under your account for 12 months unless you instruct us otherwise, then delete it. We delete it no later than 30 days after your contract ends.
• Signed audit records (plans that include them). Kept while your subscription runs. You can export them for 30 days after it ends; then we delete them. Keep your export for your own record duties, e.g. § 8 GwG. We are not an obliged entity under the German Money Laundering Act (GwG).
• Screening queries, decisions and cases you create. Part of your account data: kept until your account data is erased.
• Latency, region, plan tier — operational metrics, not personal data.
• API-key fingerprint (HMAC-SHA256, never the key itself).

What we use it for

1. Running the service — returning a verdict to your call.
2. Debugging your support requests — when you quote a sim_id we look it up.
3. Improving detection vectors — aggregate, anonymised analysis of which vector caught what. Never per-customer or per-end-user.
4. Billing — counting calls against your plan limits.

We do not sell, trade, or share data with marketing partners. We don't send promotional email to API users; transactional email only (key rotation reminders, billing notices, incident notifications).

How long we keep it

Account data

Until erased. Deleting your account removes your API keys; email privacy@txshield.dev to erase the rest, done within one month

Simulation history

12 months unless you instruct us otherwise; deleted no later than 30 days after your contract ends

Signed audit records

While your subscription runs, plus 30 days to export them

Web server logs

92 days

Traffic statistics

90 days

Error logs

Up to 35 days

Invoices, payments

8 years from the end of the year they were issued (§ 147 AO, § 14b UStG)

Backups

Deleted data can stay in backups for up to 6 months

Your rights (GDPR)

• Access — full data export from the dashboard at any time.
• Erasure — deleting your account removes your API keys at once. For full erasure of your account data, email privacy@txshield.dev; we complete it within one month (Art. 12(3) GDPR). Deleted data can stay in backups for up to 6 months.
• Rectification — edit profile data from the dashboard.
• Portability — exports are JSON, importable elsewhere.
• Objection / restriction — email privacy@txshield.dev.

You can also lodge a complaint with a supervisory authority. The competent authority for Grundlabs is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW, ldi.nrw.de).

Cookies

None. We use a single localStorage key for the theme preference, which is stored on your device and never transmitted to us. No tracking cookies, no consent banner needed.

Contact

Privacy questions

privacy@txshield.dev

DPA / contract

hello@txshield.dev

Postal

Grundlabs, Inh. Hakob Chobanyan · Dieckerhofsweg 38 · 58239 Schwerte · Germany