Privacy Policy

Last updated 13 August 2026

Data we store

• Account data: name, business name, email, phone, address, website, timezone and logo.
• Transaction data: amounts, fees, order ids, optional customer name, email and phone supplied by you.
• Technical data: API request logs (endpoint, method, status, IP, user agent) and audit logs.

What we never store

We never store plaintext passwords or plaintext API keys. Passwords are hashed with bcrypt and API keys are stored as SHA-256 hashes. We do not read your bank or e-wallet accounts and we do not access device notifications.

Retention and access

Transaction and ledger records are retained for audit purposes. You can request export or deletion of your account data, subject to legal retention duties.

Sharing

Payment data is shared only with the payment provider you connect, and only to the extent required to create and verify a payment.