Privacy Policy

We process personal data on a GDPR-aligned basis: a defined lawful basis for each purpose, minimisation, a published retention schedule and a documented data-subject request process.

What we process, and why

• Account and business-verification data — to meet our legal obligations and to operate the merchant relationship.
• Transaction data, including on-chain addresses and amounts — to perform the contract and to maintain the settlement ledger.
• Screening and risk results — for our legitimate interest in preventing fraud and for sanctions compliance.
• Security telemetry such as session IP addresses and audit records — to protect accounts and funds.

Blockchain data is public and permanent

Transactions recorded on a public blockchain cannot be edited or deleted by us or by anyone else. Erasure requests apply to the data we hold off-chain; they cannot extend to the chains themselves.

Retention

Verification records and transaction history are kept for the period required by financial record-keeping rules in the operating jurisdiction. The ledger and the audit trail are append-only by design and are retained for the life of the account plus the statutory period.

Your rights

You may request access, rectification, restriction, portability or erasure of the off-chain data we hold, and you may object to processing based on legitimate interest. Requests are answered within one month.