Privacy Policy

1. Introduction

CryptoPayCheckout ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website at cryptopaycheckout.com, our APIs, and all related services (collectively, the "Service"). This Privacy Policy applies to all users of the Service, including merchants, their customers who interact with our checkout pages, and visitors to our website. By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

2. Information We Collect

Information You Provide Directly:

• Account registration information: email address, password, business name
• Business profile information: website URL, logo image, brand colors, checkout theme preferences
• Payout wallet addresses for supported cryptocurrency networks
• Payment link configuration: titles, descriptions, amounts
• Webhook URLs for payment notifications
• Support correspondence and communications

Information Collected Automatically:

• IP addresses of API requests and dashboard access
• Browser type, operating system, and device information
• Pages viewed, features used, and actions taken within the dashboard
• Transaction data: amounts, currencies, blockchain addresses, transaction hashes, timestamps, payment status
• API usage data: request endpoints, response codes, rate limit counters
• Webhook delivery logs: URLs, response codes, delivery status

Information from Third Parties:

• Blockchain data: transaction confirmations, sender addresses, transaction hashes from public blockchain networks
• Exchange rate data from cryptocurrency price feed providers
• Currency conversion data from third-party exchange services used for payment processing

3. How We Use Your Information

We use the information we collect for the following purposes:

• Payment Processing: To facilitate cryptocurrency payments, monitor blockchain transactions, calculate fees, forward payments to your payout wallet, and process currency conversions
• Account Management: To create and maintain your account, authenticate your identity, manage API keys, and provide access to the dashboard
• Communications: To send transactional emails (payment confirmations, receipts), account notifications (API key changes, security alerts), and service updates
• Security and Fraud Prevention: To detect and prevent unauthorized access, monitor for suspicious activity, enforce rate limits, and protect against fraud and abuse
• Service Improvement: To analyze usage patterns, diagnose technical issues, and improve the reliability and functionality of the Service
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information in the following circumstances:

• Blockchain Networks: Transaction data (amounts, wallet addresses) is inherently shared with public blockchain networks as required for payment processing. Blockchain transactions are publicly visible and immutable.
• Third-Party Exchange Services: When currency conversion is used, transaction details (amounts, wallet addresses) are shared with third-party exchange providers to facilitate the conversion. These providers have their own privacy policies.
• Service Providers: We may share information with trusted service providers who assist in operating the Service (e.g., hosting providers, email services), subject to contractual obligations to protect your data.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction, subject to the same privacy protections described in this policy.

5. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include: encryption of data in transit via TLS/SSL; secure password hashing using bcrypt; CSRF token protection on all form submissions; HTTP-only, secure, SameSite session cookies; rate limiting on API endpoints; HMAC-SHA256 signed webhooks; and restricted file permissions on sensitive configuration files. Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information, and you acknowledge and accept this inherent risk.

6. Cookies and Tracking Technologies

We use session cookies that are strictly necessary for the operation of the Service, including maintaining your authenticated session when logged into the dashboard. These cookies are HTTP-only and secure, and are deleted when your session expires or when you log out. We do not use advertising cookies, tracking pixels, or third-party analytics services that track individual users across websites. We do not engage in behavioral advertising or cross-site tracking.

7. Data Retention

We retain your information for the following periods:

• Account Data: Retained for as long as your account is active. Upon account deletion request, account data is deleted within 30 days, except as required for legal compliance.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction for compliance with applicable financial recordkeeping requirements and to support dispute resolution.
• Webhook Logs: Retained for 90 days from delivery.
• API Access Logs: Retained for 90 days.
• Rate Limit Data: Retained temporarily (up to 1 hour) and automatically deleted.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update or correct inaccurate information through your dashboard settings or by contacting us.
• Deletion: You may request deletion of your personal information, subject to our legal retention obligations. Transaction records required for compliance purposes cannot be deleted upon request.
• Data Portability: You may export your transaction data in CSV format through the dashboard.
• Objection: You may object to certain processing of your personal information.
• Account Closure: You may close your account at any time by contacting support.

To exercise any of these rights, please contact us at support@cryptopaycheckout.com. We will respond to your request within 30 days.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). You have the right to: (a) know what personal information we collect, use, and disclose about you; (b) request deletion of your personal information; (c) opt out of the sale or sharing of your personal information (we do not sell or share personal information for cross-context behavioral advertising); and (d) not be discriminated against for exercising your privacy rights. To submit a verifiable consumer request, contact us at support@cryptopaycheckout.com. We will verify your identity before fulfilling your request. You may designate an authorized agent to make requests on your behalf.

10. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States. We take reasonable steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child under 18, please contact us at support@cryptopaycheckout.com.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services (such as blockchain explorers and exchange providers). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with through the Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date. For material changes that significantly affect how we process your personal information, we will provide additional notice via the email address associated with your account. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

CryptoPayCheckout
Email: support@cryptopaycheckout.com
Website: cryptopaycheckout.com