Privacy Policy

1. What We Collect

• Account data: email address and hashed password for authentication
• Payment data: transaction hashes, amounts, and wallet addresses (public blockchain data)
• Usage data: API request logs, timestamps, and IP addresses for rate limiting and security
• Webhook URLs: endpoints you configure for payment notifications

2. What We Do Not Collect

• Private keys (deposit wallet keys are encrypted at rest with AES-256)
• Personal information beyond email for account creation
• Buyer information — we do not store buyer emails unless explicitly provided during checkout

3. How We Use Your Data

• To provide and operate the payment processing Service
• To detect fraud and abuse
• To send transactional notifications (payment confirmations, webhook failures)
• To improve the Service through aggregated, anonymized analytics

4. Data Sharing

We do not sell or share your personal data with third parties, except as required by law or to operate the Service (e.g. database hosting). Transaction data on public blockchains is inherently public and outside our control.

5. Data Retention

Account data is retained for the life of your account plus 90 days after deletion. Transaction records are retained for 7 years to comply with applicable financial record-keeping requirements. You may request deletion of personal data (excluding transaction records required by law) by contacting us.

6. Security

We use industry-standard encryption (AES-256 for sensitive keys, TLS for data in transit) and follow security best practices. However, no system is 100% secure. We recommend using strong, unique passwords and enabling any available 2FA options.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data we hold about you. To exercise these rights, contact privacy@dcxpay.app.

8. Cookies

We use session cookies strictly necessary for authentication. We do not use tracking cookies or third-party advertising cookies.

9. Changes

We may update this policy. Material changes will be notified via email or a notice on the dashboard.