Legal

Privacy Policy

Last updated: December 21, 2025

Data minimization & what we collect

Essential account data you provide (name, email, phone) for onboarding and verification.
Wallet, funding, payment, and loyalty events necessary to operate the service.
Security and fraud signals (device, IP, usage patterns) to protect accounts.
USDC wallet addresses used to show balances and record payments.

What we do NOT retain

We do not retain private keys for buyer or merchant wallets. Each buyer and merchant has a wallet address. USDC you send there stays in that wallet until you pay.
We do not keep bank account numbers. Payments are USDC transfers recorded on our ledger.
We minimize personally identifiable data and keep only what is needed for compliance, fraud prevention, and required records.

How we use data

Operate buyer wallets, merchant payments, loyalty, and notifications.
Verify identity and mitigate fraud and abuse.
Provide support, service communications, and reliability/analytics to improve performance.

Sharing and processors

An identity verification provider for buyer and business checks.
SMS/email providers for transactional messages; infrastructure and analytics providers for security and uptime.
We do not sell personal data.

Security & retention

Role-based access; encryption in transit and at rest; least-privilege operational access.
Retention is limited to what is required for regulatory, fraud, tax, and accounting obligations; data is deleted or anonymized thereafter.
Incident response and audit logging are in place to monitor access and changes.

Your choices & rights

You may request access, correction, or deletion of your data where permitted by law and consistent with retention obligations.
You can update notification preferences in-app; you can request account deactivation via support.

International & regulatory

Data may be processed in the U.S. by our infrastructure providers and processors.
We comply with applicable laws and will cooperate with lawful requests consistent with our policies.

Updates

We may update this Privacy Policy as services or regulations change.
Material updates will be communicated in-app or by email; continued use after notice means you accept the changes.

Data minimization & what we collect

Essential account data you provide (name, email, phone) for onboarding and verification.

Wallet, funding, payment, and loyalty events necessary to operate the service.

Security and fraud signals (device, IP, usage patterns) to protect accounts.

USDC wallet addresses used to show balances and record payments.

What we do NOT retain

We do not retain private keys for buyer or merchant wallets. Each buyer and merchant has a wallet address. USDC you send there stays in that wallet until you pay.

We do not keep bank account numbers. Payments are USDC transfers recorded on our ledger.

We minimize personally identifiable data and keep only what is needed for compliance, fraud prevention, and required records.

Security & retention

Role-based access; encryption in transit and at rest; least-privilege operational access.

Retention is limited to what is required for regulatory, fraud, tax, and accounting obligations; data is deleted or anonymized thereafter.

Incident response and audit logging are in place to monitor access and changes.