Privacy Policy

Sonico IO is responsible for the processing required to operate the platform. Questions and personal data requests are received through the public support form or WhatsApp.

We may process account data, email, sessions, IP addresses, activity, devices, provided or authorized location, orders, payments, images, videos, support messages, and technical data needed to operate Sonico.

We also record security events to detect abuse, brute-force attempts, scraping, fuzzing, suspicious access, or attempts to exploit sensitive routes.

When you use crypto features, we may record public addresses, detected balances, transaction hashes, network, amounts, and technical metadata required for reconciliation and support. Do not upload recovery phrases or private keys except through flows expressly identified and encrypted for that purpose.

If you authorize location, camera, or gallery access, we process only the information needed for the selected feature. Images, videos, and locations may identify people or places and must be provided with sufficient authorization.

We use data to authenticate users, manage devices, process payments and settlements, prevent fraud, resolve disputes, comply with legal obligations, and improve the service.

Users must avoid uploading private keys, credentials, sensitive financial data, or third-party content without authorization.

We may also use technical records to block attacks, protect sessions, investigate incidents, preserve evidence for claims, and maintain operational continuity.

We may share strictly necessary data with providers of hosting, transactional email, authentication, maps, storage, security, Mercado Pago, blockchain infrastructure, and support, or with authorities when legally required.

Some providers may process information outside Argentina. In those cases, reasonable contractual and legal safeguards must be applied under applicable data protection law.

Sonico does not sell personal data. Blockchain addresses and transactions may be public and remain permanently available on the corresponding network.

We apply access controls, secret encryption, session records, audit logging, rate limits, and monitoring. No measure completely eliminates the risk of incidents.

Certain signals may trigger preventive blocks on an IP address, session, payment, or account. Users may request a support review if they believe a block was incorrect.

We retain information for as long as needed to operate the account, meet obligations, resolve claims, and maintain security records.

Users may request access, correction, or deletion of their data through the support channels available on the platform.

Some records may be retained after account deletion when needed for accounting, payments, disputes, security, fraud prevention, legal defense, or regulatory compliance.

Access requests are answered within ten calendar days, and correction, update, or deletion requests within five business days, after identity verification. If the response is not satisfactory, the data subject may file a complaint with Argentina's Agency for Access to Public Information.