Privacy Policy

We collect information that you provide directly to us and information generated when you use the Service.

Account and contact information. When you create an account, place an order, or contact support, we may collect your email address, name, password (stored only as a salted hash), order information, support messages, and other information you choose to provide.

Order and payment information. When you check out we record the items, amounts, currency and payment method you select. Payment credentials are entered directly with our payment providers — Alipay, WeChat Pay or NOWPayments — and never reach our servers.

Identity and verification information. When an account or order is flagged as high-risk, we may require identity verification to protect the Service, prevent fraud and abuse, and enforce our Terms of Use. This may include legal name, government-issued identification information or images, face images or selfies, facial features derived from submitted images, liveness verification signals, verification results, and related review records. We use this information only for verification, fraud and abuse prevention, account protection, compliance, and Service security — never for advertising or marketing.

Usage, device, and technical information. When you access the Service we may automatically collect technical information such as IP address, browser type, device identifiers, operating system, pages viewed, referring URLs, log data, crash data, approximate location derived from IP address, and cookie identifiers.

Cookies and similar technologies. We use cookies and similar technologies to keep you signed in, remember preferences, protect accounts, and detect abuse. You can control cookies through your browser settings, but disabling some may affect Service functionality.

Minors' privacy. The Service is not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we learn that such information has been collected, we will take reasonable steps to delete it and disable the account. Contact us at support@chameleon.com if you believe this has occurred.

• Provide, operate, maintain, and improve the Service.
• Create, authenticate, and manage accounts.
• Verify identity and account ownership, including risk-triggered KYC checks.
• Process orders, payments, digital delivery, and support requests.
• Detect, investigate, and prevent fraud, abuse, unauthorized access, and security incidents.
• Enforce our Terms of Use and policies.
• Send order confirmations, delivery emails, service notices, and security alerts.
• Analyze performance, diagnose errors, and improve reliability.
• Comply with legal obligations and respond to lawful requests.

We do not sell, trade, or rent your personal information for marketing purposes. We may share information only in these limited situations:

• Service providers: vendors that help us provide hosting, payment processing (Alipay, WeChat Pay, NOWPayments), email delivery, customer support, and security services.
• Legal and safety reasons: when disclosure is necessary to comply with law, respond to lawful requests, enforce our Terms of Use, investigate abuse, or protect the rights, safety, and security of Chameleon, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate data protection measures.
• With your consent: when you ask us to share information or otherwise consent to disclosure.

Identity and face verification information is shared only with providers needed for verification, security, fraud prevention, compliance, or lawful requests. It is never shared for advertising or marketing.

We retain personal information for as long as reasonably necessary to provide the Service, maintain accounts, fulfill orders, resolve disputes, prevent abuse, enforce agreements, and comply with legal obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Identity verification information may be retained for as long as needed for verification, fraud prevention, account security, compliance, and dispute handling. When it is no longer needed, we take reasonable steps to delete or de-identify it.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure — including access controls, TLS encryption in transit, salted password hashing, monitoring, and rate limiting on sensitive endpoints.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us promptly if you believe your account has been compromised.

You may contact us to request access to, correction of, or deletion of your personal information, subject to account security, legal requirements, and legitimate Service protection needs. You may also close your account at any time. We may retain certain information after closure when reasonably necessary for fraud prevention, legal compliance, dispute resolution, or enforcement of our Terms of Use.

The Service may contain links to third-party websites, payment processors, or communication tools such as Telegram. We are not responsible for the privacy practices of third parties — review their privacy policies before providing information to them.

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date on this page or provide another appropriate notice. Your continued use of the Service after changes become effective means you accept the updated Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Chameleon — support@chameleon.com