Privacy Policy

1. Who processes your data

The owner and operator of personal data is Caban Work LLP, operating under the trading name Section9 (“we”). This policy explains what data we collect through section9.host and app.section9.host, why we collect it, how long we keep it, and what rights you have. We process personal data in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.

2. What we collect

Contact data you give us: name or company name, email address, messenger handle, and the content of your enquiry.

Account and billing data: credentials, API keys, tariff, invoices and payment records, and details required for accounting purposes.

Technical data: IP address, request timestamps, endpoint and method called, request volume, user agent, and error logs. This data is generated automatically when you use our RPC endpoints or the site and is necessary for security, abuse prevention and capacity planning.

We do not collect biometric data, we do not request seed phrases or private keys, and we never ask you for them. Any message asking for your keys on our behalf is fraudulent.

3. Why we process it

To conclude and perform the service agreement, provide access to validator and RPC services, issue invoices and accept payment, provide technical support, protect our infrastructure from abuse and attack, maintain the quality and availability of the services, and comply with accounting and tax obligations under the law of the Republic of Kazakhstan.

4. Basis of processing and consent

We process personal data with your consent, given when you submit a form, create an account or contact us, and where processing is required for the performance of the agreement or by law. Consent is voluntary and may be withdrawn at any time by writing to us; withdrawal does not affect processing carried out before withdrawal, nor data we must retain by law.

5. Disclosure to third parties

We do not sell personal data. We may disclose it only to: data centres and hosting providers that operate the physical infrastructure; payment providers and banks, to process payment; accounting and audit contractors; and state authorities, where disclosure is required by a lawful request. Every contractor is bound by confidentiality obligations and may process data only for the purpose we specify.

6. Storage, location and retention

Personal data of citizens of the Republic of Kazakhstan is stored on servers located in the territory of the Republic of Kazakhstan, as required by law. Technical logs are retained for up to 12 months. Contact and account data is retained for the term of the agreement and for the statutory retention period thereafter; accounting records are retained for the period prescribed by tax legislation. After the retention period expires, data is deleted or anonymised.

7. Security

We apply organisational and technical measures proportionate to the risk: encryption in transit, restricted and logged access on a need-to-know basis, network segmentation, continuous monitoring, and regular review of our configuration. No system is absolutely secure; if a breach affects your data, we will notify you and the competent authority as required by law.

8. Your rights

You have the right to know whether we hold data about you, to obtain a copy of it, to have inaccurate data corrected, to withdraw consent, to demand blocking or deletion of unlawfully obtained data, and to complain to the authorised body for the protection of personal data of the Republic of Kazakhstan. To exercise any right, write to us at the address below; we respond within the period prescribed by law.

9. Changes to this policy

We may update this policy. The current version is always published on this page with its date of update. Material changes affecting the purposes of processing will be communicated to Clients by email.

10. Contact

Requests concerning personal data: admin@section9.host