Effective date: 16 April 2026 Last updated: 16 April 2026
This Privacy Policy explains how Sulphurtech International Services Ltd. ("we", "us", "our", or "HookFlow") collects, uses, and protects personal information when you visit our website (xrplhookflow.com) or purchase our products and services.
We are based in British Columbia, Canada. This policy is written in plain English because we believe you should be able to understand what we do with your data without a lawyer.
1. Who we are
HookFlow is a product operated by Sulphurtech International Services Ltd., a company incorporated in British Columbia, Canada. You can contact us at:
- Email: hello@xrplhookflow.com
- Website: https://xrplhookflow.com
2. What information we collect
We collect the following personal information, and only the following:
Information you give us directly
- Email address — when you contact us via the website form or email
- Name — when you provide it on the contact form
- Message content — anything you write to us
- Wallet address (public) — when you purchase a hook and need configuration, you give us the public r... address for your wallet. Wallet addresses are not considered private information because they are visible to anyone on the blockchain by design.
- Payment information — if you pay us in XRP, we record the transaction hash so we can confirm receipt. We do not store credit card, bank, or other financial details because we do not accept those payment methods.
Website analytics
We use Google Analytics (a service provided by Google LLC) to understand which pages visitors find useful and how they navigate our website. We have configured Google Analytics with the following privacy protections:
- Consent required. Google Analytics does NOT load until you click "Accept" on our cookie banner. If you click "Decline" (or never respond), no analytics data is collected from your visit.
- IP anonymization. The last octet of your IP address is truncated before Google stores it, so your specific address is never logged.
- No ad personalization. We do not use Google Analytics for advertising, remarketing, or audience building — only for page-view counts and basic navigation data.
- No cross-site tracking. We do not share your data with advertising networks or other sites.
You can withdraw consent anytime by clicking "Cookie settings" in the footer of our website, or by using your browser's cookie controls.
Information we do NOT collect
- We do not use advertising cookies or remarketing pixels
- We do not use Meta/Facebook Pixel, TikTok Pixel, or similar
- We do not sell, rent, or trade any visitor data
- We do not collect your IP address beyond standard server logs and the anonymized Google Analytics collection described above
- We do not collect your private keys, wallet seeds, or recovery phrases — and we will never ask you to share these. Anyone asking for them is a scammer.
3. How we use your information
We use the information you give us only to:
- Respond to your enquiries
- Deliver products and services you have purchased (including sending you your configured hook files, installation guide, and support emails)
- Configure your purchased hooks with the parameters you provided
- Verify payments you have sent us
- Communicate with you about your purchase (including bug fixes or critical updates)
- Comply with legal obligations (for example, accounting and tax records)
We do not use your information for marketing, advertising, profiling, or automated decision-making.
4. How we store and protect your information
Your information is stored in:
- Our email inbox (Gmail, operated by Google) for support conversations
- Our payment records (plain file storage, encrypted at rest) for transactions
- Our accounting software for tax compliance (currently operated by Sulphurtech International Services Ltd.)
We take reasonable technical and organisational measures to protect your information from unauthorised access, loss, or misuse. However, no system is 100% secure. If we ever become aware of a data breach involving your information, we will notify you within 72 hours.
5. Who we share your information with
We do not sell, rent, or trade your personal information to anyone. Ever.
We share your information only in these specific circumstances:
- Service providers — email hosting (Google Workspace), website hosting, and payment processors need technical access to deliver their services to us. They are bound by their own privacy policies and confidentiality obligations.
- Legal compliance — if required by a valid court order, subpoena, or law enforcement request in Canada, we will comply and inform you unless legally prohibited from doing so.
- Business transfer — if Sulphurtech International Services Ltd. is ever sold or merged, your information may transfer to the acquiring company. You will be notified before this happens.
6. Blockchain transactions are public
Important to understand: Any transaction you make on the Xahau or XRPL networks is permanently visible on the public blockchain. This includes:
- Your wallet address
- Amounts sent and received
- Timestamps
- Any destination tags or memos you include
This is a property of blockchain technology, not something HookFlow controls. We cannot delete, hide, or modify blockchain transaction history. If you need financial privacy, public blockchains (including XRPL and Xahau) are not the right technology.
7. Your rights
You have the following rights regarding your personal information:
- Access — ask us what information we hold about you
- Correction — ask us to correct inaccurate information
- Deletion — ask us to delete your information (subject to legal retention requirements — we may need to keep records for tax and accounting purposes)
- Portability — ask us for a copy of your data in a readable format
- Withdraw consent — tell us to stop processing your information for optional purposes
- Complain — file a complaint with the Office of the Privacy Commissioner of Canada if you believe we have mishandled your information
To exercise any of these rights, email hello@xrplhookflow.com and we will respond within 30 days.
8. International data transfers
Some of our service providers (email, hosting) are located outside Canada. By using our services, you consent to your information being processed in these jurisdictions, subject to the same protections described in this policy.
9. Children
HookFlow is not intended for children under 16. We do not knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email. Continued use of the website or services after changes means you accept the updated policy.
11. Contact us
For any privacy-related questions, requests, or complaints:
Email: hello@xrplhookflow.com Company: Sulphurtech International Services Ltd. Jurisdiction: British Columbia, Canada
This policy was drafted in plain English for readability. It is governed by the laws of British Columbia, Canada, and complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).