Document overview
Legal Information
Privacy Policy
How STR.Talk handles account data, metadata, security, user rights, retention, complaints, and third-party services while keeping communication content end-to-end encrypted.
01 / STR.Talk legal
1. Introduction
1.1 Description of STRTALK's Privacy Core
STRTALK app is a secure instant messaging application that uses the proprietary Voice Over Blockchain Protocol (VOBP) to enable encrypted, private communication. Designed and developed by SourceLess, STRTALK ensures that all messages, voice calls, and file transfers are protected with advanced encryption standards.
Unlike traditional encryption methods where keys may be exchanged or stored on centralized servers, VOBP establishes a direct encrypted channel between users without exchanging encryption keys via a server. This eliminates the risk of key interception or unauthorized access. Communication remains entirely private and tamper-proof, as STRTALK itself cannot access the content of messages, calls, or file transfers. The result is a decentralized, censorship-resistant environment that prioritizes user privacy at its core.
To this effect, STRTALK will only have access to the account information that you provide (e.g. telephone number and user ID), limited metadata, such as the time a message was sent or the user IDs involved in a conversation, but it does not have access to the content of the communication itself. All conversations remain private and protected against unauthorized access, even from STRTALK.
1.2. Who We Are and How to Contact Us
For the purposes of this Privacy Policy:
- The terms "STRTALK", "STR.DOMAIN", and "VOBP" refer collectively to features and functionalities made available through the STRTALK chat application.
- The term "Service" refers to the STRTALK application and all communication services provided through it by CCOIN FINANCE CORPORATE STRUCTURE CO., LTD, part of SourceLess ecosystem.
References to "we", "us", or "STRTALK" throughout this document shall be understood as referring to CCOIN FINANCE CORPORATE STRUCTURE CO., LTD, part of SourceLess ecosystem, which operates under the trading name STRTALK.
STRTALK is the Data Controller for your data. We can be contacted at CCOIN FINANCE CORPORATE STRUCTURE CO., LTD, part of SourceLess ecosystem. For questions, email sourcelessANDROIDAPP@sourceless.net.
1.3. Scope of This Document
This document explains how we process personal data, as it relates to:
- STRTALK chat app regular users: individuals who download, install, and use the STRTALK messaging application on a mobile device or desktop.
- STR.Domain users: individuals who access STRTALK using an organization-assigned STR.Domain, without phone registration.
- This document does not cover:
- Your legal relationship with STRTALK as a communication service provider;
- Services or infrastructure not provided by STRTALK;
- The CCOIN service.
1.4. Changes to This Document
We may update this Privacy Policy from time to time. The updated version will always be available within the STRTALK app or on our website, including its effective date. By continuing to use STRTALK after changes, you agree to the updated Privacy Notice.
02 / STR.Talk legal
2. Access to Your Data
2.1. Legal Basis for Processing and Your GDPR Rights
2.1.1 Purpose and Legal Basis for Processing
| Purpose | Legal basis |
|---|---|
| To create and manage your STRTALK account | Art. 6(1)(b) – Performance of contract |
| To enable core functions (messaging, calls, file sharing) | Art. 6(1)(b) – Performance of contract |
| To maintain security and prevent abuse | Art. 6(1)(f) – Legitimate interest |
| To transmit encrypted content and metadata | Art. 6(1)(b) – Performance of contract |
| To provide customer support | Art. 6(1)(b)/(f) – Contract/performance & legitimate interest |
| To comply with legal obligations | Art. 6(1)(c) – Legal obligation |
| To send service-related notices | Art. 6(1)(c)/(f) – Legal obligation & legitimate interest |
| To analyze usage (anonymized) | Art. 6(1)(f) – Legitimate interest |
| To manage enterprise relationships | Art. 6(1)(f) – Legitimate interest |
| To sync contacts with consent | Art. 6(1)(a) – Consent |
2.1.2 Data Ownership
All messages, calls, and files are end-to-end encrypted and stored locally. STRTALK does not store or back up content, so data loss on uninstall cannot be recovered by us. Each device maintains its own data copy.
2.1.3. Your Rights
You have the following GDPR rights:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision-making
2.2. Information We Collect and Why
2.2.1 Information You Provide
We collect minimal registration information:
- Email address
- STR.Domain
- Username
- Profile picture
Optional contact discovery uses hashed address book data with your consent to identify STRTALK users.
2.2.2 Information Collected Automatically
Connection Info: Authentication tokens, push tokens, keys.
Usage Info: Login/logout events, crash reports (minimal).
Location: Not collected or stored. Shared location in chats is E2EE.
STRTALK Calls: we process IP addresses, usernames, timestamps, and call type metadata, all E2EE.
2.4. Compliance with Legal Requests
STRTALK will notify users of legal data requests when permitted and challenges overly broad requests. Due to E2EE and no server-side key storage, we can only share metadata such as account info and timestamps, but not message content.
03 / STR.Talk legal
3. Information We May Share
We work with third parties (e.g., SMS verification providers). They are bound by their own privacy policies. Embeds like YouTube or Giphy follow their own terms when used in STRTALK.
04 / STR.Talk legal
4. Storage Period
We retain personal data only as long as necessary for processing purposes. Once the purpose ends, data is deleted unless legal retention obligations apply. Data under consent is deleted upon withdrawal.
05 / STR.Talk legal
5. Making a Complaint
For privacy complaints, email sourcelessANDROIDAPP@sourceless.net. You may also contact your supervisory authority.
06 / STR.Talk legal
7. Third-Party Payment Services (CCOIN)
7.1. Payment Information
STRTALK does not process payments; CCOIN handles payment data under its own policies.
7.2. Shipping and Billing Information
Shipping/billing info for CCOIN transactions is shared only with merchants. STRTALK neither accesses nor stores it.
7.3. Clearing Payment Information
You can remove saved payment/shipping details in CCOIN settings; CCOIN will delete tokens and card data where possible.
7.4. Payment Disputes
STRTALK does not mediate payment disputes—contact merchants, payment providers, or banks directly.
Last Updated: May 2026