Privacy Policy

We collect several types of information from and about users of our services:

1.1 Information You Provide

• Account Information: When you create an account, we collect your email address, shop domain (Shopify store URL), and account credentials.
• Wallet Addresses: You provide cryptocurrency wallet addresses for receiving payments. These are stored encrypted in our database.
• Payment Information: If you subscribe to a paid plan, we collect billing information processed through Stripe (we do not store credit card details).
• Support Communications: When you contact support, we collect your messages, email address, and any information you choose to provide.

1.2 Information Collected Automatically

• Transaction Data: We collect information about cryptocurrency payments processed through our platform, including amounts, cryptocurrencies used, timestamps, and transaction hashes.
• Usage Data: We collect information about how you interact with our services, including pages viewed, features used, and actions taken.
• Device Information: We collect device type, operating system, browser type, IP address, and unique device identifiers.
• Log Data: Our servers automatically record information including IP addresses, access times, browser types, and pages viewed.

1.3 Information from Third Parties

• Shopify: We receive store information, order data, and customer information from Shopify when you install our app.
• CoinGecko: We retrieve real-time cryptocurrency prices from CoinGecko API for payment calculations.
• Blockchain Networks: We monitor blockchain networks for payment confirmations and transaction status.

We use the information we collect for the following purposes:

• Provide Services: To process cryptocurrency payments, display payment information, and provide core platform functionality.
• Account Management: To create and manage your account, authenticate users, and provide customer support.
• Payment Processing: To calculate cryptocurrency amounts, generate QR codes, monitor payment confirmations, and send payment notifications.
• Analytics and Improvement: To understand how users interact with our platform, identify trends, and improve our services.
• Communication: To send transaction confirmations, security alerts, platform updates, and respond to support inquiries.
• Security: To detect and prevent fraud, unauthorized access, and other malicious activities.
• Legal Compliance: To comply with legal obligations, enforce our Terms of Service, and respond to lawful requests from authorities.
• Marketing: With your consent, to send promotional materials about new features, pricing updates, and platform improvements (you can opt out anytime).

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Shopify: Our app integrates with Shopify and shares data necessary for platform functionality.
• Railway (Hosting): Our infrastructure is hosted on Railway, which may have access to data stored on their servers.
• Stripe (Payment Processing): For paid plan subscriptions, billing information is processed through Stripe.
• CoinGecko (Price Data): We query CoinGecko for real-time cryptocurrency prices.
• Email Service Provider: For sending transactional emails and notifications.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Subpoenas, court orders, or other legal processes
• Requests from government authorities or law enforcement
• Protection of our legal rights, property, or safety
• Investigation of fraud, security, or technical issues

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our platform of any change in ownership or uses of your personal information.

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted to and from our platform is encrypted using TLS/SSL. Wallet addresses are stored encrypted in our database.
• Access Controls: We restrict access to personal information to employees and service providers who need it to perform their duties.
• Non-Custodial Architecture: We never have access to your cryptocurrency private keys or seed phrases. All payments flow directly to your wallet.
• Regular Audits: We perform regular security audits and vulnerability assessments of our platform.
• Secure Infrastructure: Our platform is hosted on secure, monitored infrastructure with automated backups.

IMPORTANT: While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the security of your wallet private keys, which we never have access to.

We use cookies and similar tracking technologies to enhance your experience:

Types of Cookies We Use:

• Essential Cookies: Required for authentication, session management, and core platform functionality.
• Preference Cookies: Remember your settings and preferences (language, network selection, etc.).
• Analytics Cookies: Help us understand how users interact with our platform to improve functionality.
• Shopify Cookies: Required for integration with Shopify's platform and admin interface.

You can control cookies through your browser settings. However, disabling essential cookies may impact platform functionality.

Third-Party Tracking:

We may use third-party analytics services (such as Google Analytics) to understand usage patterns. These services may use cookies to collect information about your use of our platform.

Our platform integrates with several third-party services:

• Shopify: Subject to Shopify's Privacy Policy (https://www.shopify.com/legal/privacy)
• Stripe: Subject to Stripe's Privacy Policy (https://stripe.com/privacy)
• CoinGecko: Subject to CoinGecko's Privacy Policy
• Blockchain Networks: Cryptocurrency transactions are public and permanent on blockchain networks

We are not responsible for the privacy practices of these third-party services. We recommend reviewing their privacy policies.

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active and for a reasonable period after account closure for legal and administrative purposes.
• Transaction Data: Retained for 7 years for tax compliance and financial record-keeping requirements.
• Support Communications: Retained for 3 years for customer service purposes.
• Analytics Data: Aggregated and anonymized data may be retained indefinitely for platform improvement.

When data is no longer needed, we securely delete or anonymize it. You can request deletion of your data at any time, subject to our legal obligations.

You have the following rights regarding your personal information:

8.1 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (Right to be Forgotten).
• Right to Restriction: Request restriction of processing of your personal data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data for certain purposes.
• Right to Withdraw Consent: Withdraw consent for data processing at any time.

8.2 CCPA Rights (California Users)

If you are a California resident, you have the following rights under CCPA:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

8.3 How to Exercise Your Rights

To exercise any of these rights, contact us at:

We will respond to your request within 30 days. We may require verification of your identity before processing your request.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.

To use our services, you must be at least 18 years old and have the legal capacity to enter into contracts.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

Our platform is hosted on Railway, which may process data in various locations globally. We ensure that appropriate safeguards are in place to protect your information regardless of where it is processed.

For users in the EEA, we comply with GDPR requirements for international data transfers, including using Standard Contractual Clauses where applicable.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email at the address associated with your account
• Display a prominent notice on our platform
• For significant changes, request your explicit consent if required by law

Your continued use of our services after the effective date of the updated Privacy Policy constitutes acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection authority.