top of page

Bloctopus

Terms of Service

Version: 1.0 (December 2025)

 

I. INTRODUCTION, SCOPE, AND ACCEPTANCE OF THESE TERMS

1.1 Provider details.
This document (“Terms of Service”) is issued by Bloctopus Intelligence (the “Provider”, “we”, “us”, “our”).

1.2 What these Terms cover.
These Terms govern:

  • Access to and use of the website available at www.bloctopus.net and any subpages, content, and features (the “Website”), and

  • A general contractual framework for the Provider’s blockchain forensics and crypto recovery-related services (the “Services”), as further described on the Website and/or in other materials.

1.3 Separate agreement for each Service engagement (key principle).
Any specific Service engagement is performed only under a separate written agreement (e.g., engagement letter, statement of work, service agreement) executed between the Provider and the relevant client (the “Service Agreement”). Accordingly:

  • These Terms do not constitute a binding offer to deliver Services.

  • Submission of an inquiry via the Website does not create an obligation for the Provider to accept a case or commence work, and

  • The scope, deliverables, fees, timelines, responsibilities, third-party involvement, data processing, and any case-specific terms are agreed exclusively in the Service Agreement.

1.4 Precedence in case of conflict.
If there is any inconsistency between these Terms and a Service Agreement, the Service Agreement prevails to the extent of the inconsistency.

1.5 Acceptance of Terms.
By accessing or using the Website, downloading materials, or submitting an inquiry, you confirm that you have read and understood these Terms and agree to be bound by them. If you disagree, you must not use the Website.

1.6 Who is bound, the authority to accept.


If you use the Website on behalf of a legal entity, you represent that you have authority to bind that entity to these Terms. In that case, “you” and “User” include the entity.

1.7 Eligibility.
The Website is intended for persons who can form legally binding contracts under applicable law. The Provider may refuse access to the Website or decline inquiries at its discretion, including for compliance, legal, security, or risk-management reasons.

1.8 Updates to Terms.
We may amend these Terms from time to time. The version indicated by the “Effective date” at the top applies. Continued use of the Website after changes become effective constitutes acceptance of the updated Terms.

 

II. DEFINITIONS

For the purposes of these Terms, the following definitions apply:

“Client” means any natural or legal person that has entered into a Service Agreement with the Provider for the performance of Services.

“Content” means all materials made available on or through the Website, including text, documents, graphics, logos, icons, images, audio/video materials, and any other content, whether owned by the Provider or licensed to the Provider.

“Inquiry” means any request for information, proposal, estimate, or engagement submitted through the Website or otherwise communicated to the Provider (including by email, phone, or messaging channels).

“Personal Data” has the meaning given to it under the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”).

“Report” means any output, memorandum, analysis, diagram, transaction-flow visualization, dataset export, evidentiary package, or other deliverable that may be produced by the Provider as part of the Services, as specifically agreed in the applicable Service Agreement.

“Service Agreement” means the separate written agreement (including an engagement letter and/or statement of work) entered into between the Provider and a Client, which sets out the scope, deliverables, fees, timelines, and other case-specific terms for the Services.

“Services” means blockchain forensics, crypto recovery support, incident analysis, monitoring, reporting, and related professional services offered by the Provider from time to time, as described on the Website and/or in other Provider materials, and as specifically agreed in a Service Agreement.

“Third-Party Services” means any services, software, tools, platforms, infrastructure, or APIs provided by third parties that may be referenced on the Website or used by the Provider in connection with the Website or the Services (including, without limitation, blockchain analytics tools, communication tools, hosting providers, and crypto-asset service providers).

“User” means any person who accesses, visits, or uses the Website, whether or not that person becomes a Client.

“VASP/CASP” means a crypto-asset service provider or virtual asset service provider (including, without limitation, crypto exchanges, custodians, brokers, and other platforms that may control or facilitate transfers of crypto-assets), whether regulated or unregulated, depending on jurisdiction.

“Website” means the website available at [INSERT DOMAIN] and any subpages, Content, and features made available through it.

Interpretation rules:

  • Headings are for convenience and do not affect interpretation.

  • Words in the singular include the plural and vice versa.

  • “Including” and similar words are without limitation.

  • References to laws and regulations include amendments and replacements.

III. WEBSITE ACCESS, PERMITTED USE, AND PROHIBITED CONDUCT

3.1 Access and availability.
We aim to keep the Website available, but we do not guarantee uninterrupted access or error-free operation. We may suspend, withdraw, or restrict the availability of all or any part of the Website for operational, security, legal, or business reasons.

3.2 Permitted use.
You may use the Website solely for lawful purposes, including to:

  • Review information about the Provider and the Services.

  • Submit an Inquiry, and

  • Access Content we make publicly available, subject to these Terms.

3.3 Prohibited conduct.
You must not, and must not attempt to:

  • use the Website in any way that violates applicable law, regulation, court order, or sanctions regime;

  • use the Website for fraudulent purposes or in connection with unlawful crypto-asset activity (including money laundering, sanctions evasion, terrorist financing, or other illicit conduct);

  • interfere with, disrupt, or attempt to gain unauthorized access to the Website, its servers, systems, networks, or databases;

  • introduce malware, spyware, viruses, worms, trojans, logic bombs, or other harmful code;

  • perform or facilitate scraping, crawling, harvesting, or automated extraction of Content, except where explicitly permitted in writing by the Provider;

  • probe, scan, or test the vulnerability of the Website, or breach any security or authentication measures;

  • use the Website to transmit unsolicited marketing, spam, or bulk communications;

  • impersonate any person or entity or misrepresent your affiliation with any person or entity;

  • upload or transmit content that is defamatory, infringing, obscene, or otherwise unlawful;

  • copy, modify, translate, distribute, publish, publicly display, or create derivative works from the Content, except to the extent expressly permitted by mandatory law or with the Provider’s prior written consent.

3.4 Security and compliance checks.
We may implement technical and organizational measures to protect the Website and our Users, including traffic monitoring, rate limiting, and blocking of suspicious access patterns. Where legally required or appropriate, we may also apply compliance checks to Inquiries (e.g., sanctions screening) and may decline to respond or proceed.

3.5 Links to third-party websites.
The Website may include links to third-party websites or resources. Such links are provided for convenience only. We do not control, endorse, or assume responsibility for third-party content, availability, security, or practices. Your use of third-party websites is at your own risk and subject to their terms.

3.6 No reliance.
The Website Content is provided for general information purposes only. You should not rely on it as professional advice (including legal, tax, financial, or investment advice). For case-specific guidance, you must obtain appropriate professional advice and/or enter into a Service Agreement.

 

 

IV. INTELLECTUAL PROPERTY AND LICENSE TO USE WEBSITE CONTENT

4.1 Ownership.
Unless explicitly stated otherwise, all rights, title, and interest in and to the Website and the Content (including copyrights, trademarks, trade names, logos, designs, text, graphics, and the selection and arrangement thereof) are owned by or licensed to the Provider and are protected by applicable intellectual property laws.

4.2 Limited license to Users.
Subject to these Terms, the Provider grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Website and to view the Content solely for your personal or internal business purposes related to evaluating or inquiring about the Services.

4.3 Restrictions.
Except as expressly permitted by mandatory law or by the Provider in writing, you must not:

  • reproduce, copy, distribute, publish, display, transmit, sell, license, or otherwise exploit any Content;

  • remove, alter, or obscure any copyright, trademark, or proprietary notices;

  • use any trademarks, logos, or brand identifiers of the Provider without prior written consent;

  • create derivative works from the Content.

4.4 Client deliverables.
Any Reports, analyses, evidentiary packages, or other deliverables produced as part of Services are governed by the applicable Service Agreement (including ownership, license, permitted use, and any limitations). Unless agreed otherwise in the Service Agreement, the Provider retains its pre-existing materials, methodologies, templates, know-how, tooling configurations, and internal processes.

4.5 Feedback.
If you provide suggestions, ideas, or feedback about the Website or Services (“Feedback”), you grant the Provider a worldwide, perpetual, irrevocable, royalty-free right to use, reproduce, and incorporate such Feedback into the Website, Services, or other materials, without compensation, provided that this does not require the Provider to disclose your confidential information.

V. WEBSITE DISCLAIMERS AND LIMITATION OF LIABILITY

5.1 Informational content; no professional advice.
The Website and the Content are provided for general informational purposes only and do not constitute legal, tax, financial, investment, or other professional advice. You should not rely on the Website as a substitute for obtaining professional advice tailored to your circumstances.

5.2 “As is” and “as available”.
To the maximum extent permitted by applicable law, the Website and the Content are provided on an “as is” and “as available” basis. We make no representations or warranties (express, implied, or statutory) that the Website will be uninterrupted, timely, secure, error-free, or free of harmful components.

5.3 Accuracy and completeness.
While we use reasonable efforts to keep the Website up to date, we do not warrant that the Content is accurate, complete, or current at all times. We may change, remove, or update Content without notice.

 

5.4 No guarantee of outcomes.
Any statements on the Website regarding blockchain forensics, tracing, recovery, “unlocking” of funds, or similar outcomes are illustrative only. Outcomes depend on case-specific facts and third-party actions (including actions by exchanges/VASPs/CASPs, banks, law enforcement, courts, or other entities). The Provider does not guarantee any particular result, including the recovery of assets, the identification of a perpetrator, or the release of funds.

5.5 Third-party websites and services.
The Website may reference or link to Third-Party Services. We do not control and are not responsible for third-party content, availability, security, policies, or practices. Your use of Third-Party Services is at your own risk and subject to their terms.

5.6 Limitation of liability (Website use).
To the maximum extent permitted by applicable law:

  • The Provider shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, loss of revenue, loss of business, loss of data, business interruption, or reputational harm arising out of or in connection with your use of (or inability to use) the Website or Content, even if we have been advised of the possibility of such damages, and

  • The Provider’s aggregate liability for direct damages arising out of or in connection with the Website (including these Terms) shall be limited to EUR 100.

5.7 Mandatory law carve-outs.
Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for: (i) fraud or fraudulent misrepresentation; (ii) willful misconduct; (iii) death or personal injury caused by negligence; or (iv) any other liability that cannot be lawfully limited. If you are a consumer, nothing in these Terms affects your mandatory statutory rights.

5.8 The Service Agreement governs services.
Any liability, warranties, service levels, and remedies related to the Services (including Reports and other deliverables) are governed exclusively by the applicable Service Agreement, not by this Section 5, unless explicitly stated otherwise in the Service Agreement.

VI. INQUIRIES, COMMUNICATIONS, AND NO CONTRACT FORMATION VIA THE WEBSITE

6.1 Inquiries are non-binding.
Any Inquiry submitted through the Website (including via contact forms) is non-binding and does not constitute a binding offer, acceptance, or agreement to provide Services. The Provider may, at its sole discretion, respond to an Inquiry, request additional information, propose engagement terms, or decline to proceed.

6.2 No Services commence without a Service Agreement.
The Provider will not commence Services unless and until a Service Agreement has been concluded. Any pre-engagement communications, preliminary calls, or high-level assessments are for scoping and feasibility purposes only and do not create a duty of care or obligation to deliver Services, except to the extent mandatory law provides otherwise.

6.3 Communication channels and security.
You acknowledge that communication over email, web forms, messaging platforms, or similar channels may not be fully secure. Unless otherwise agreed in writing, you accept the risks inherent in such communications. If you require encrypted communications, please request this and we may propose an appropriate secure channel.

 

6.4 Unsolicited information; no confidentiality by default.
Do not send confidential, sensitive, or highly personal information through the Website unless we have expressly requested it or unless a Service Agreement (and, where applicable, an NDA) is in place.


To the maximum extent permitted by applicable law, the Provider shall not be responsible for safeguarding unsolicited information submitted through the Website outside an agreed engagement, and such submission does not, by itself, create a confidential relationship.

6.5 Record-keeping.
The Provider may retain records of Inquiries and communications for legitimate business purposes, compliance, and security (including audit trails), in accordance with the Privacy Policy and applicable law.

 

6.6 No obligation to respond or to accept a case.
The Provider may decline any Inquiry, including (without limitation) where:

  • The matter falls outside the Provider’s expertise or capacity.

  • There is a potential conflict of interest.

  • Compliance checks indicate heightened risk (e.g., sanctions exposure).

  • The requested Services appear to support unlawful activity, or

  • The Provider otherwise determines that it is not appropriate to proceed.

VII. SERVICES OVERVIEW, SCOPE, AND ENGAGEMENT PROCESS

7.1 Framework only; scope is set in the Service Agreement.
Section 7 provides a general framework for how the Services are typically delivered. The specific scope, deliverables, timelines, fees, responsibilities, assumptions, limitations, and acceptance criteria are agreed exclusively in the applicable Service Agreement.

7.2 Typical engagement phases (indicative).
Unless agreed otherwise in the Service Agreement, an engagement may be delivered in one or more of the following phases:

Intake and triage

  • high-level fact gathering (incident narrative, assets involved, time window, known addresses, platforms);

  • initial feasibility assessment and risk screening (including conflicts and compliance checks where applicable);

  • definition of the initial investigative hypothesis and priorities.

 

Onboarding and evidence collection

  • secure collection of inputs (addresses, tx hashes, exchange identifiers, correspondence, screenshots, logs);

  • basic evidence preservation measures and documentation (where relevant, including chain-of-custody style records as feasible);

  • clarification of required authorizations (e.g., power of attorney for communication with VASPs/CASPs).

 

Forensic analysis and tracing

  • on-chain tracing and flow analysis (including cross-chain/bridges where applicable);

  • clustering and attribution analysis (to the extent methodologically and legally appropriate);

  • identification of potential “choke points” (e.g., VASP deposits, OTC ramps, mixers—where detectable);

  • monitoring/watchlisting of relevant addresses if agreed.

Reporting and deliverables

  • preparation of agreed deliverables (e.g., transaction-flow diagrams, timelines, address inventories, evidentiary packages, executive summaries, tax/audit-oriented reports);

  • documentation of methodology and key assumptions (at a level aligned with the intended audience, e.g., court, compliance team, tax authority).

Post-report support (optional)

  • support with VASP/CASP outreach, compliance packs (“proof of origin/source”), follow-ups, and escalation routes (where agreed and authorized);

  • support with law enforcement, counsel, insurers, or internal teams (as agreed);

  • expert clarification sessions and updates if monitoring yields material changes.

7.3 Assumptions and dependencies.
Unless the Service Agreement states otherwise, our work typically assumes that:

  • The Client provides timely, accurate, and complete information and materials;

  • The Client has the lawful right to request analysis relating to the relevant assets/data;

  • Third parties (e.g., VASPs/CASPs, banks, registrars, hosting providers, authorities) may be required to act for certain outcomes, and their cooperation is outside our control; and

  • blockchain data is generally public, but attribution to real-world identities is probabilistic and may require third-party corroboration.

7.4 Reliance on Client data; no duty to verify external truth.
We may rely on information and documents provided by the Client (or by third parties introduced by the Client) without independent verification unless the Service Agreement requires verification steps. We are not responsible for inaccuracies, delays, or adverse outcomes caused by incomplete, misleading, or incorrect inputs.

7.5 Third-party services, tools, and subcontractors.
We may use specialist tools and infrastructure (including third-party analytics, hosting, communications, and secure storage) to perform the Services.


We may engage subcontractors or external experts where reasonably necessary (e.g., specialist investigators, translators, local counsel, technical experts), subject to appropriate confidentiality and data protection safeguards.


If the Service Agreement requires prior approval for specific third-party involvement or additional costs, we will obtain such approval before incurring them.

7.6 Change control (scope changes and additional work).
Any material change to scope, deliverables, timeline, or priorities (including adding chains, expanding time windows, adding new wallets/entities, preparing additional reports, or extensive outreach/escalations) constitutes a Change Request.


Change Requests must be agreed in writing (email sufficient unless the Service Agreement requires a formal amendment) and may result in adjustments to fees, milestones, and timelines.
We are not obliged to perform work outside the agreed scope unless and until a Change Request is approved.

 

7.7 Deliverable format and acceptance.
Deliverable formats (e.g., PDF report, slide deck, spreadsheets, case file exports, diagrams) and any acceptance criteria are defined in the Service Agreement. If not specified, deliverables are deemed accepted when delivered, unless the Client notifies material non-conformities within 10 working days.

 

7.8 No guarantee of outcome; best-efforts nature.
Unless expressly agreed otherwise in the Service Agreement, Services are provided on a best-efforts basis. We do not guarantee the recovery of assets, the unfreezing of funds, the identification of perpetrators, or any specific outcome or timeline.

 

7.9 Suspension due to non-cooperation or risk.
We may suspend performance if (a) required inputs are not provided, (b) payment milestones are overdue (where applicable), or (c) legal/compliance risks arise. Conditions for suspension/termination, and the related fee consequences, are governed by the Service Agreement.

VIII. CLIENT OBLIGATIONS AND PROHIBITED USE

8.1 General cooperation obligations.
The Client shall cooperate in good faith and provide timely assistance reasonably required for the performance of the Services, including (as applicable):

  • complete and accurate incident descriptions and timelines;

  • relevant wallet addresses, transaction hashes, destination addresses, and network/chain identifiers;

  • exchange/platform account details (where relevant and lawfully available);

  • screenshots, emails, chat logs, invoices, contracts, and other supporting documentation;

  • access to relevant internal records (for business/public sector engagements), including logs and audit trails where appropriate.

8.2 Accuracy of information; duty to inform.
The Client represents and warrants that all information and materials provided are accurate, complete, and not misleading to the best of its knowledge. The Client shall promptly notify the Provider of any material changes or newly discovered facts that could affect the Services.

8.3 Authority and lawful right to request Services.
The Client represents and warrants that it has the legal authority and lawful basis to:

  • Request analysis of, or actions relating to, the relevant wallets, accounts, or data, and

  • Provide to the Provider the information and documentation necessary for the engagement.


If the Client acts for a third party (e.g., a victim, heir, spouse, or corporate affiliate), the Client shall provide appropriate written authorization and evidence of authority upon request.

8.4 Prohibited requests and unlawful use.
The Client must not request, and the Provider will not provide, any Services that:

  • Facilitate or conceal unlawful activity, including money laundering, terrorist financing, fraud, sanctions evasion, or other illicit conduct.

  • Involve unauthorized access to wallets, systems, accounts, or communications.

  • Require hacking, credential theft, impersonation, deception, or unlawful “social engineering”,

  • Seek to compromise third-party security measures or violate the terms of third-party platforms (unless a lawful exception applies and is confirmed in writing).

8.5 Credentials and private keys; no sharing requirement.
The Client acknowledges that the Provider generally does not require, and will not request, the Client’s seed phrase, private keys, or recovery phrase as a condition for delivering the Services. The Client must not share such credentials with the Provider unless explicitly requested in exceptional circumstances and documented in the Service Agreement with appropriate safeguards.

8.6 Preservation of evidence.
Where relevant, the Client shall take reasonable steps to preserve evidence and prevent spoliation, including retaining relevant communications, screenshots, transaction records, device logs, and third-party correspondence. Upon request, the Provider may provide guidance on practical evidence preservation steps; however, the Client remains responsible for evidence preservation unless otherwise agreed in the Service Agreement.

8.7 Third-party interactions and authorizations.
If outreach to exchanges/VASPs/CASPs, banks, or other third parties is within scope, the Client shall provide any required authorizations (e.g., power of attorney, signed letters, verified identity documentation).
The Client acknowledges that third parties may impose additional requirements or fees and may decline to cooperate, and that such decisions are outside the Provider’s control.

8.8 Compliance checks.
The Client agrees to provide information reasonably necessary for compliance checks, including identity verification and, where appropriate, source-of-funds/source-of-wealth information. The Provider may suspend or terminate the engagement if the Client refuses or fails to provide such information or if compliance concerns arise.

8.9 Client responsibility for decisions.
The Client remains solely responsible for its decisions, actions, and communications with third parties and authorities. The Provider’s deliverables are intended to support the Client’s informed decisions; they do not replace legal advice, law enforcement action, or decisions by regulated third parties.

IX. COMPLIANCE, ETHICAL CONDUCT, AND RIGHT TO DECLINE OR TERMINATE

9.1 Lawful and ethical performance.
The Provider performs the Services in accordance with applicable law and professional standards. The Provider will not engage in, support, or facilitate unlawful conduct, including unauthorised access to systems or accounts, credential theft, hacking, deception, or any activity intended to launder, conceal, or otherwise legitimise illicit proceeds.

9.2 Compliance screening and onboarding requirements.
The Provider may, at any time (including prior to engagement and during performance), conduct compliance checks it considers appropriate, including:

  • Identity verification (KYC) and verification of authority/representation.

  • Sanctions screening and risk-based checks (including beneficial ownership where applicable).

  • Source-of-funds/source-of-wealth inquiries where relevant to the matter.

The Client shall provide the requested information and documentation promptly. Failure to do so may result in refusal, suspension, or termination of Services.

9.3 Conflicts of interest.
The Provider may decline an engagement or implement safeguards if a conflict of interest is identified (including conflicts involving existing or former clients, counterparties, or related parties). Where feasible and lawful, the Provider may propose conflict mitigation measures, but is not obliged to accept an engagement.

9.4 Right to refuse, suspend, or terminate.
The Provider may refuse to accept an engagement, or may suspend or terminate an ongoing engagement, with immediate effect and without liability, if:

  • The requested Services are unlawful, unethical, or inconsistent with these Terms.

  • The Provider reasonably suspects the engagement could facilitate illicit activity.

  • The Client provides materially false, misleading, or incomplete information.

  • The Client fails to cooperate, fails compliance checks, or fails to provide required authorisations.

  • Continued performance would expose the Provider to undue legal, regulatory, reputational, or operational risk; or

  • Payment obligations under the Service Agreement are overdue (where applicable).

The Service Agreement governs any fee consequences of suspension/termination.

9.5 Reporting to authorities and legal obligations.

The Client acknowledges that the Provider may be required to disclose certain information if mandated by applicable law, regulation, court order, or competent authority request. The Provider may also take steps necessary to protect its legal position, including preserving evidence and maintaining appropriate audit trails.

9.6 No circumvention or interference.
The Client shall not use the Provider’s deliverables to:

  • Interfere with ongoing investigations;

  • Harass or threaten third parties;

  • Submit knowingly false allegations or documentation; or

  • Circumvent sanctions, AML/CTF controls, or platform terms.

9.7 Integrity of evidence and chain-of-custody.
Where evidence preservation or chain-of-custody practices are within the agreed scope, the Client shall follow the Provider’s reasonable instructions to maintain the integrity of evidence (e.g., not altering source files, preserving metadata, maintaining secure storage). The Provider is not responsible for evidentiary integrity where the Client fails to comply.

X. FEES, BILLING, PAYMENT TERMS, AND EXPENSES

10.1 Fees determined by the Service Agreement.
All fees for the Services (including the pricing model, hourly rates, fixed fees, caps, milestones, retainers, and payment schedules) are set out in the applicable Service Agreement. Any fee indications on the Website or in pre-engagement communications are non-binding unless expressly confirmed in a Service Agreement.

10.2 Estimates and variability.
Unless expressly stated otherwise in the Service Agreement, any time or cost estimate is an estimate only and may change based on case complexity, scope changes, third-party responsiveness, and the volume/quality of available inputs.

10.3 Retainers and advance payments.
The Provider may require an advance payment or retainer before commencing work and/or as a condition for continuing work. The amount, purpose, and treatment of any retainer (including whether it is refundable or applied against invoices) shall be set out in the Service Agreement.

10.4 Invoicing and payment deadlines.
Invoices are issued as specified in the Service Agreement (e.g., upfront, at milestones, monthly in arrears, or upon delivery). Unless otherwise agreed, invoices are payable within 14 days from the invoice date.

 

10.5 Taxes.
Fees are exclusive of VAT and other applicable taxes unless expressly stated otherwise. Where VAT applies, it will be added in accordance with applicable law and shown on the invoice.

10.6 Expenses and third-party costs.
The Client shall reimburse reasonable and necessary out-of-pocket expenses incurred in connection with the Services if such expenses are within scope and permitted under the Service Agreement (e.g., notarization, courier, translation, external expert fees, legal filings, court fees).
Costs of Third-Party Services (including paid analytics tooling, data sources, or platform service charges) are not included unless expressly stated.
Where feasible, the Provider will seek the Client’s approval before incurring material third-party costs, unless urgent circumstances require immediate action.

10.7 Late payment.
If the Client fails to pay an invoice by the due date, the Provider may (without limiting other rights under the Service Agreement or law):

  • Suspend Services until payment is received.

  • Charge statutory interest for late payment and recover reasonable collection costs, to the extent permitted by applicable law, and/or

  • Terminate the engagement in accordance with the Service Agreement.

10.8 Disputed invoices.
If the Client disputes an invoice, the Client must notify the Provider in writing within [7/10] working days of the invoice date, specifying the disputed amount and the reasons for dispute. Undisputed portions remain payable in accordance with the payment deadline.

10.9 No set-off.
Unless mandatory law provides otherwise, the Client may not withhold payment, set off, or deduct any amounts from invoices without the Provider’s prior written consent.

 

XI. NO GUARANTEE OF RESULTS; LIMITATIONS OF SERVICES AND THIRD-PARTY DEPENDENCIES

11.1 Best-efforts nature; no guaranteed outcome.
Unless expressly stated otherwise in the Service Agreement, the Services are provided on a best-efforts basis. The Provider does not guarantee any particular result, including (without limitation):

  • Recovery or return of crypto-assets or funds.

  • Freezing, blocking, or “unlocking” of accounts or assets.

  • Identification of any perpetrator or beneficial owner.

  • Successful engagement with or response from any exchange/VASP/CASP, bank, payment provider, law enforcement authority, prosecutor, regulator, or court, or

  • Any specific timeline for outcomes.

11.2 Third-party cooperation is outside the Provider’s control.
Many potential outcomes depend on actions by third parties (including VASPs/CASPs, banks, wallet providers, hosting/email providers, telecom operators, and competent authorities). Third parties may:

  • Refuse to cooperate, request additional documentation, or require court orders.

  • Impose their own timelines, fees, or compliance requirements, and/or Act inconsistently across jurisdictions

 

The Provider is not responsible for delays, refusals, or adverse outcomes caused by third parties.

 

11.3 Public blockchain data and attribution limitations.
Blockchain transactions are generally public and traceable, but linking on-chain activity to a real-world identity is often probabilistic . It may require corroboration from third-party records (e.g., exchange KYC data), which may be inaccessible without legal process. Accordingly:

  • Tracing results may be limited by the availability of reliable attribution signals, and

  • Conclusions may be stated with degrees of confidence rather than certainty.

 

11.4 Obfuscation techniques and technical constraints.
Certain techniques may reduce traceability or increase uncertainty, including:

  • Mixers/tumblers, privacy tools, stealth addresses, and privacy coins.

  • Chain-hopping, bridges, wrapped assets, and high-frequency splitting/peeling.

  • Use of intermediaries, OTC brokers, and nested services.

  • Loss or absence of relevant off-chain evidence.


The Provider will use reasonable methods and tools but cannot eliminate inherent technical limitations.

 

11.5 No unlawful methods.
The Client acknowledges that the Provider will not use unlawful or unethical methods, including hacking, credential theft, impersonation, deception, or unauthorized access. This may limit available recovery pathways.

11.6 Client decisions and risk allocation.
The Client remains responsible for decisions taken based on the Provider’s deliverables, including whether and how to:

  • Report to law enforcement or regulators.

  • Contact exchanges/VASPs/CASPs.

  • Initiate civil claims, injunctions, or other legal actions.

  • Engage insurers, incident response teams, or counsel.


The Provider’s deliverables support decision-making but do not replace legal advice or official action.

 

11.7 No custody, no handling of Client crypto-assets (unless explicitly agreed).
Unless expressly agreed in the Service Agreement, the Provider does not take custody of, control over, or possession of the Client’s crypto-assets, private keys, seed phrases, or exchange accounts. Any exceptional arrangement must be documented in writing with security and compliance safeguards.

12. CONFIDENTIALITY, RECORDS, AND DISCLOSURES

12.1 Confidential information.
“Confidential Information” means any non-public information disclosed by a party (the “Disclosing Party”) to the other party (the “Receiving Party”) in connection with an Inquiry, the Website, or the Services, whether disclosed orally, visually, in writing, electronically, or otherwise, including (without limitation): case facts, wallet addresses and mappings (where non-public in context), evidentiary materials, investigative hypotheses, methodologies (to the extent not public), commercial terms, and business information. Confidential Information does not include information that the Receiving Party can demonstrate:

  • is or becomes publicly available through no breach of these Terms or the Service Agreement;

  • was lawfully known to the Receiving Party prior to disclosure.

  • is lawfully obtained from a third party without breach of any confidentiality obligation, or

  • is independently developed without use of or reference to the Disclosing Party’s Confidential Information.

 

12.2 Confidentiality obligations.
The Receiving Party shall:

  • keep the Confidential Information strictly confidential.

  • use it solely for the purpose of evaluating an engagement and/or performing or receiving the Services.

  • restrict access to personnel and subcontractors who have a need to know and who are bound by confidentiality obligations at least as protective as those herein, and

  • apply reasonable technical and organizational measures to protect Confidential Information against unauthorized access, loss, or disclosure.

12.3 Permitted disclosures.
The Provider may disclose Confidential Information to the extent reasonably necessary to:

  • Perform the Services (including to permitted subcontractors and Third-Party Services, subject to appropriate safeguards).

  • Obtain professional advice (e.g., legal, tax, or audit advice) under confidentiality.

  • Comply with applicable law, regulation, court order, or binding request from a competent authority;

  • establish, exercise, or defend legal claims, or

  • protect the security and integrity of the Provider’s systems and operations.

Where legally permissible, the Provider will use reasonable efforts to notify the Client in advance of a compelled disclosure.

12.4 Records, audit trails, and chain-of-custody (where in scope).
Where agreed in the Service Agreement, the Provider may maintain records supporting evidentiary integrity (e.g., timestamps, source references, hash values, access logs) and may provide chain-of-custody style documentation.


The Provider’s ability to ensure evidentiary integrity may depend on the Client’s cooperation and the manner in which materials are provided and stored by the Client.

12.5 Retention and deletion.
The Service Agreement and applicable law govern retention periods for engagement records and Confidential Information. Unless otherwise stated in the Service Agreement:

  • Inquiry-related records may be retained for legitimate purposes (e.g., compliance, conflict checks, security), and

  • Engagement records may be retained for the duration necessary to perform the Services and for reasonable periods thereafter for legal, audit, and dispute purposes.

Upon request and where feasible, the Provider may delete or return certain materials, subject to legal retention obligations and the Provider’s legitimate interests (e.g., maintaining evidence to defend legal claims).

12.6 Public references and case studies.
The Provider will not publish Client-identifying case studies, testimonials, or public references to an engagement without the Client’s prior written consent, except where information is already public and the Client is not identifiable, or where disclosure is required by law.

12.7 Non-disclosure agreements.
If the parties execute a separate NDA, that NDA will apply in parallel. In case of conflict regarding confidentiality obligations, the NDA or the Service Agreement (as applicable) will prevail over this Section 12 to the extent of inconsistency.

XIII. INTELLECTUAL PROPERTY IN DELIVERABLES; LICENSE; METHODOLOGY RESERVATION

 

13.1 Pre-existing intellectual property.
Each party retains all rights, title, and interest in and to any intellectual property, materials, tools, software, templates, methodologies, know-how, and data that existed prior to the commencement of the Services or that are developed independently of the engagement (“Pre-existing IP”). Nothing in these Terms or the Service Agreement transfers ownership of Pre-existing IP, except as expressly agreed in writing.

 

13.2 Ownership of Deliverables.
The ownership regime for reports, analyses, diagrams, case files, and other deliverables produced in the course of the Services (collectively, the “Deliverables”) shall be specified in the Service Agreement. Unless the Service Agreement expressly provides for transfer of ownership, the default position is that:

  • The Provider retains ownership of all intellectual property rights in the Deliverables, and

  • The Client receives a license to use the Deliverables as set out in Section 13.3.

 

13.3 License to use Deliverables (default).
Unless otherwise agreed in the Service Agreement, the Provider grants the Client a non-exclusive, non-transferable (except as reasonably required for the case), non-sublicensable license to use the Deliverables:

  • For the Client’s internal purposes (e.g., internal investigations, compliance, governance), and

  • For the specific external purposes explicitly connected with the engagement, such as sharing with:

    • Competent authorities (e.g., law enforcement, prosecutors, regulators, tax authorities);

    • Exchanges/VASPs/CASPs, banks, insurers, or other relevant counterparties;

    • Courts, arbitral tribunals, or legal counsel in connection with legal proceedings.

 

Any other use, including publication or broader distribution, requires the Provider’s prior written consent unless mandatory law applies.

13.4 Restrictions on use.
Unless expressly permitted in the Service Agreement or required by mandatory law, the Client shall not:

  • Commercially exploit the Deliverables as a standalone product or service.

  • Modify, adapt, or create derivative works from the Deliverables in a way that misrepresents the Provider’s findings or methodology.

  • Remove or alter any copyright notices, disclaimers, or other legends included in the Deliverables, or

  • Present the Deliverables as if they were produced by the Client or a third party.

 

13.5 Methodologies, tools, and know-how.
The Client acknowledges that:

  • The Provider may use proprietary or licensed tools, methodologies, workflows, configurations, visualizations, and heuristics in the course of delivering the Services, and

  • Regardless of any ownership of Deliverables, the Provider retains all rights to such methodologies, tools, and know-how.

The Provider is free to reuse and further develop them for other clients and engagements, provided that no Client Confidential Information is disclosed or used in breach of Section 12 and applicable data protection laws.

13.6 Aggregated and anonymised data.
The Provider may use aggregated and anonymised data derived from engagements (including high-level statistics and non-identifying case patterns) to improve its tools, methodologies, and service offerings, provided that such use does not disclose the Client’s identity or Confidential Information and complies with applicable data protection law.

13.7 Third-party materials in Deliverables.
Deliverables may incorporate or reference third-party content or data (e.g., blockchain explorer screenshots, analytics platform exports, public filings). Rights in such third-party materials remain with the respective rights holders. The Client’s use of such materials may be subject to additional terms imposed by those third parties.

13.8 Use of Client name and logo (optional).
Unless otherwise agreed in the Service Agreement:

  • The Provider may not use the Client’s name or logo in public marketing materials or on the Website without the Client’s prior written consent.

  • Internal use (e.g., project records, conflict checks) is permitted.

XIV. LIABILITY, INDEMNITIES, AND LIMITATION OF CLAIMS (SERVICES)

14.1 Services liability governed by the Service Agreement.
Any liability regime applicable to the Services (including caps, exclusions, warranties, service levels, and remedies) shall be set out in the applicable Service Agreement. This Section 14 applies as a default framework only, to the extent not overridden by the Service Agreement and to the maximum extent permitted by applicable law.

14.2 No warranties, professional judgment.
Except as expressly stated in the Service Agreement, the Provider gives no warranties (express, implied, or statutory) regarding the Services or Deliverables. The Services involve professional judgment and analysis based on available information; conclusions may be probabilistic and subject to change as new data emerges.

 

14.3 Exclusion of indirect and consequential loss.
To the maximum extent permitted by law, the Provider shall not be liable for any indirect, special, incidental, consequential, exemplary, or punitive losses or damages, including (without limitation) loss of profits, loss of revenue, loss of business, loss of goodwill, loss of opportunity, business interruption, or loss of data, arising out of or in connection with the Services, the Deliverables, or any Service Agreement, even if foreseeable or advised of the possibility.

 

14.4 Cap on liability (default).
Unless otherwise agreed in the Service Agreement, the Provider’s total aggregate liability for all claims arising out of or in connection with an engagement (whether in contract, tort, negligence, misrepresentation, restitution, or otherwise) shall be limited to the total fees actually paid by the Client to the Provider under the relevant Service Agreement in the [three (3)] months preceding the event giving rise to the claim (or another cap specified in the Service Agreement).

 

14.5 Third-party actions and force majeure-style events.
The Provider shall not be liable for any failure or delay, or for any outcome, to the extent caused by:

  • Actions or omissions of third parties (including VASPs/CASPs, banks, authorities, counterparties, or platform providers).

  • Changes in third-party policies or terms.

  • Blockchain network conditions (congestion, forks, reorgs), protocol upgrades, chain outages, or systemic events.

  • Cyber incidents not caused by the Provider’s gross negligence or willful misconduct; or

  • Events beyond the Provider’s reasonable control.

14.6 Client responsibility for decisions; no regulated advice.
The Client remains responsible for all decisions and actions taken based on Deliverables, including whether and how to contact third parties, report to authorities, initiate legal proceedings, or negotiate settlements. The Provider does not provide regulated financial services, investment advice, or custody unless expressly agreed and permitted by law.

14.7 Indemnity by Client.
To the maximum extent permitted by law, the Client shall indemnify, defend, and hold harmless the Provider (including its directors, officers, employees, contractors, and agents) from and against claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to:

  • The Client’s breach of these Terms or the Service Agreement.

  • Unlawful or prohibited use of Deliverables.

  • Misrepresentation by the Client or provision of materially false/misleading information, or

  • Third-party claims caused by the Client’s instructions, communications, or actions, except to the extent directly caused by the Provider’s willful misconduct or gross negligence.

14.8 Claim notification and limitation period.
Unless mandatory law provides otherwise, the Client must notify the Provider of any claim in writing without undue delay after becoming aware of it. Any claim arising out of or in connection with the Services must be brought within 12 months from the date the Client became aware (or should reasonably have become aware) of the facts giving rise to the claim.

14.9 Non-excludable liability.
Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for fraud, fraudulent misrepresentation, willful misconduct, and, where applicable, death or personal injury caused by negligence.

XV. TERM, SUSPENSION, AND TERMINATION

15.1 Term of these Terms (Website).
These Terms apply from the time you first access or use the Website and remain in effect for as long as you continue to use the Website.

15.2 Suspension or restriction of Website access.
The Provider may suspend, restrict, or terminate your access to the Website (in whole or in part), without prior notice, if the Provider reasonably believes that:

  • Your use of the Website violates these Terms or applicable law.

  • Your access poses a security risk to the Website or other users.

  • Your actions interfere with the Website’s operation or integrity, or

  • It is necessary to protect the Provider’s legal interests or comply with legal obligations.

 

15.3 Term and termination of Service engagements.
The term of any Service engagement, and any termination rights, are governed primarily by the applicable Service Agreement. If the Service Agreement is silent, the following default rules apply to the extent permitted by law:

Termination for convenience.

 

Either party may terminate the engagement for convenience upon 10 working days’ written notice.

Termination for cause.


Either party may terminate the engagement immediately by written notice if the other party:

  • Materially breaches the Service Agreement or these Terms and fails to remedy the breach within a reasonable period (if capable of remedy).

  • Becomes insolvent, enters liquidation/bankruptcy, or ceases business operations, or

  • Engages in unlawful, unethical, or prohibited conduct related to the engagement.

  • Suspension.

The Provider may suspend performance (without terminating) if:

  • Required inputs or authorizations are not provided.

  • Compliance requirements are not met.

  • Invoices are overdue, or

  • Continuing performance would create undue legal, compliance, or security risk.

15.4 Effects of termination (Services).
Unless otherwise specified in the Service Agreement:

  • The Client shall pay for all Services performed and approved expenses incurred up to the effective termination date.

  • Where fees are milestone-based, the Provider may invoice for completed milestones and for work in progress reasonably performed toward the next milestone.

  • If a retainer/advance payment exists, its treatment (application/refund) is as set out in the Service Agreement.

  • The Provider will, where feasible and appropriate, provide an offboarding summary and deliver any completed Deliverables paid for, subject to compliance constraints and legal obligations.

15.5 Return or deletion of Client materials.
Upon termination, the Provider will handle Client materials in accordance with the Service Agreement and Section 12 (Confidentiality, Records, and Disclosures), including any applicable legal retention obligations and the Provider’s legitimate interests (e.g., legal defense, audit trails).

 

15.6 Survival.
The following provisions survive termination or expiry of these Terms and/or any engagement: Sections relating to intellectual property (Section 13), confidentiality (Section 12), liability and indemnities (Section 14), governing law and jurisdiction, and any other provisions that by their nature are intended to survive.

XVI. NOTICES AND COMMUNICATIONS

16.1 Permitted notice methods.
Any formal notice or communication required under these Terms (and, unless otherwise specified, under a Service Agreement) shall be made in writing and delivered by one of the following methods:

  • Email to the addresses specified in the Service Agreement or, if no Service Agreement exists, to the email address published on the Website.

  • Registered mail/courier to the registered address of the Provider or the Client (as applicable); or

  • Any other method expressly agreed in writing by the parties.

16.2 Service of notices by email.
Unless the Service Agreement specifies otherwise, notices may be served by email. The sender is responsible for ensuring the email is correctly addressed and for retaining evidence of transmission.

16.3 Deemed receipt.
Unless mandatory law provides otherwise or the Service Agreement states otherwise:

  • A notice sent by email is deemed received on the next Working Day after it is sent, provided no delivery failure notification is received by the sender.

  • A notice sent by courier is deemed received on the date recorded by the courier as delivered.

  • A notice sent by registered mail is deemed received on the second Working Day after posting (domestic) or the fifth Working Day after posting (international), unless proven otherwise.

16.4 Operational communications.
Operational communications relating to delivery of the Services (e.g., clarifications, requests for documents, meeting scheduling, draft review cycles) may be conducted via email or other channels agreed with the Client. Such operational communications do not constitute formal legal notices unless explicitly stated as such.

16.5 Language.
Unless otherwise agreed, notices and communications under these Terms and any engagement shall be in English. If the parties use additional languages for convenience, the English version prevails in case of inconsistency, unless mandatory law requires otherwise.

XII. GOVERNING LAW, JURISDICTION, AND DISPUTE RESOLUTION

17.1 Governing law.
These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of Slovenia, without regard to conflict-of-laws rules, except to the extent mandatory consumer protection laws or other mandatory rules apply.

 

17.2 Good-faith resolution.
Before commencing formal proceedings, the parties shall use reasonable efforts to resolve disputes amicably through good-faith negotiations. Either party may initiate this process by sending a written notice describing the dispute and the desired resolution.

17.3 Escalation and timeframes (optional).
Unless the Service Agreement provides otherwise, if the dispute is not resolved within 15 Working Days from the notice under Section 17.2, either party may commence formal proceedings.

17.4 Jurisdiction.
Subject to mandatory law, the courts of Ljubljana, Republic of Slovenia, shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these Terms.

17.5 Injunctive relief.
Nothing in this Section 17 prevents either party from seeking urgent interim or injunctive relief (including protective measures) in any competent court where necessary to protect its rights, Confidential Information, or intellectual property.

XVIII. MISCELLANEOUS

18.1 Entire agreement; hierarchy.
These Terms constitute the entire agreement between you and the Provider regarding your use of the Website and supersede any prior or contemporaneous statements, understandings, or communications relating to Website use.


For Services, the applicable Service Agreement (and any NDA or statement of work referenced therein) constitutes the entire agreement regarding that engagement. In case of conflict, the hierarchy is: (i) Service Agreement (and its annexes/SOWs), then (ii) any NDA (if separate and applicable), then (iii) these Terms.

18.2 Severability.
If any provision of these Terms is held to be invalid, unlawful, or unenforceable by a competent authority, that provision shall be deemed modified to the minimum extent necessary to make it enforceable. If such modification is not possible, the provision shall be severed, and the remaining provisions shall remain in full force and effect.

18.3 No waiver.
Failure or delay by the Provider to enforce any provision of these Terms shall not constitute a waiver of that provision or any other provision. Any waiver must be in writing and signed by the waiving party.

 

18.4 Assignment.
You may not assign, transfer, or subcontract any of your rights or obligations under these Terms without the Provider’s prior written consent. The Provider may assign these Terms to an affiliate or successor in connection with a merger, acquisition, corporate reorganization, or sale of assets, provided this does not materially reduce your rights under mandatory law.

18.5 Relationship of the parties.
Nothing in these Terms creates a partnership, joint venture, agency, employment relationship, or fiduciary relationship between the parties. The Provider acts as an independent contractor.

18.6 Third-party rights.
Unless mandatory law provides otherwise, no person other than the Provider and the Client/User has any rights to enforce any provision of these Terms.

18.7 Force majeure (Website and general framework).
The Provider shall not be liable for any failure or delay in performance caused by events beyond its reasonable control, including network outages, third-party service disruptions, cyber incidents, natural disasters, labor disputes, governmental actions, and other force majeure events. Where relevant for Services, detailed force majeure provisions may be included in the Service Agreement.

18.8 Consumer rights.
If you are acting as a consumer, nothing in these Terms limits your mandatory statutory rights.

 

XIX. PRIVACY POLICY AND COOKIES (GDPR)

This Section 19 explains how the Provider processes personal data in connection with the Website, Inquiries, and (where applicable) the onboarding and delivery of Services. Where a specific Service Agreement includes additional privacy/data-processing terms (e.g., a data processing agreement), those terms apply in parallel and may supplement this Section.

19.1 Data Controller and contact

The controller of personal data is Bloctopus Intelligence.

Privacy contact: info@bloctopus.net 
No DPO appointed.

19.2 Categories of personal data we process

Depending on your interaction with us, we may process the following categories:

  • Identification and contact data: name, email, phone number, country, company/role.

  • Inquiry and case-related data you provide: wallet addresses, transaction hashes, exchange/VASP identifiers, screenshots, correspondence (emails/chats), documents you submit, and narrative descriptions of incidents.

  • Technical and usage data (Website): IP address, device/browser information, operating system, referral URLs, timestamps, logs, and similar telemetry needed for security and functionality.

  • Compliance/onboarding data (where applicable): identity verification data, authority/representation documentation (e.g., power of attorney), sanctions screening outputs, and (where relevant) source-of-funds/source-of-wealth information.

  • Billing and contractual data (Clients): invoicing data, payment confirmations, contract details, and communication history.

Note: Blockchain transaction data may be public; however, when it is linked to an identifiable individual in context, it may constitute personal data under GDPR.

19.3 Purposes and legal bases for processing

We process personal data for the following purposes and on the following legal bases (GDPR Art. 6):

  1. Operating and securing the Website (availability, troubleshooting, abuse prevention, security monitoring) – legal basis: legitimate interests (Art. 6(1)(f)).

  2. Responding to Inquiries and taking steps at your request prior to contracting (communications, scoping, feasibility) – legal basis: pre-contractual steps (Art. 6(1)(b)).

  3. Performing Services under a Service Agreement (delivery of agreed services, reporting, client support) – legal basis: contract performance (Art. 6(1)(b)).

  4. Compliance and integrity checks (e.g., conflicts, sanctions screening, KYC-type checks where appropriate) – legal basis: legal obligation (Art. 6(1)(c)) and/or legitimate interests (Art. 6(1)(f)), depending on circumstances.

  5. Establishing, exercising, or defending legal claims (dispute handling, evidence preservation, audit trails) – legal basis: legitimate interests (Art. 6(1)(f)).

  6. Marketing communications (only where applicable) – legal basis: consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)) where permitted by law; you may opt out at any time.

​​

19.4 Data sources

We collect personal data from:

  • You directly (Website forms, email, calls, meetings).

  • Your authorized representatives.

  • Public sources (including public blockchain data and public registers) where relevant and lawful.

  • Third parties involved in the matter (e.g., exchanges/VASPs/CASPs), where you have authorized outreach and where lawful.

19.5 Recipients and processors

We may share personal data on a need-to-know basis with:

  • IT/hosting/email and security providers supporting Website and operations.

  • Subcontractors/external experts engaged for the case (under confidentiality and appropriate safeguards).

  • Professional advisers (e.g., lawyers, auditors) under confidentiality.

  • Competent authorities where required by law, court order, or binding request.

  • We require processors to protect personal data and process it only on our documented instructions.

 

19.6 International data transfers

If personal data is transferred outside the EEA (e.g., because a service provider or subcontractor is located outside the EEA), we implement appropriate safeguards such as:

  • EU Standard Contractual Clauses, and/or

  • Reliance on an adequacy decision, where applicable; and/or

  • Other lawful transfer mechanisms under GDPR.

19.7 Data retention

We retain personal data only as long as necessary for the purposes described above, including:

  • Inquiry data: typically 6–24 months after the last interaction, unless an engagement is initiated or legal retention is required.

  • Client engagement data: for the term of the engagement and thereafter for [INSERT PERIOD], aligned with limitation periods, compliance needs, and legal defense requirements.

  • Security logs: typically 30–180 days, unless needed for incident investigation.

We may retain minimal records (e.g., conflict/compliance outcomes) where justified by legitimate interests and legal requirements.

19.8 Your rights (GDPR)

Subject to GDPR conditions and exceptions, you have the right to:

  • Access your personal data.

  • Rectification.

  • Erasure.

  • Restriction of processing.

  • Data portability.

  • Object to processing based on legitimate interests.

  • Withdraw consent (where processing is based on consent), without affecting processing already carried out.

 

Requests can be submitted to info@bloctopus.net. We may need to verify your identity before responding.

 

19.9 Cookies and similar technologies

We may use cookies and similar technologies for:

  • Strictly necessary Website functionality and security.

  • Preferences (where applicable).

  • Analytics (optional; only where enabled and, where required, with consent).

Where required, we will present a cookie banner/consent mechanism. You can also manage cookies via your browser settings. Disabling certain cookies may affect Website functionality.

 

19.10 Security measures

We implement reasonable technical and organizational measures to protect personal data (e.g., access control, least-privilege, encryption where appropriate, backups, logging). No system is completely secure; please avoid sending highly sensitive information via unencrypted channels unless explicitly agreed.

19.11 Complaints

You have the right to lodge a complaint with a supervisory authority. If you are in Slovenia, the competent authority is the Information Commissioner (IP-RS).

19.12 Children

The Website is not intended for children, and we do not knowingly collect personal data from children.

 

19.13 Updates to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on the Website with a revised effective date.

 

XX. CONTACT

20.1 Website and Terms.
For questions relating to the Website or these Terms, please contact:

Email: info@bloctopus.net

20.2 Services and engagement inquiries.
To submit an Inquiry or discuss a potential engagement:
Email: info@bloctopus.net
Optional intake form: 
Optional secure channel: +38631860634 (Whatsapp)

20.3 Privacy.
For privacy-related questions or to exercise your GDPR rights:
Email:  info@bloctopus.net

20.4 Fraud / impersonation reporting.
If you suspect phishing, impersonation, or fraudulent communications claiming to be from the Provider, contact us immediately via:
Email: info@bloctopus.net
Note: We will never ask for seed phrases or private keys via email or contact forms.

bottom of page