Privacy Policy

Buyers interact with Solo Pay purely through their own crypto wallet. We do not collect names, emails, phone numbers, government IDs, or other personal identifiers from payers, and SoloPay checkout does not ask payers for those fields. A payment involves only:

• The wallet address used to pay (a pseudonymous, public on-chain identifier).
• On-chain transaction data — amount, token, network, transaction hash, timestamp — which is publicly recorded on the blockchain by design, not by us.
• An optional merchant order reference passed by the store to reconcile the payment.

We do not, and cannot, control or erase data that has been recorded on a public blockchain.

To operate the merchant dashboard we process:

• Account data: username and a hashed password used to sign in.
• Merchant configuration: store name, selected chain, recipient wallet address, accepted tokens, webhook URL, and allowed IPs.
• Credentials: API keys, public keys, and webhook secrets are stored only as one-way hashes or shown once at generation time.
• Billing data: a Stripe customer and subscription identifier. Card/payment details are handled entirely by Stripe and never touch our servers.
• Operational logs: limited technical logs needed for security, abuse prevention, and reliability.

• To provide, secure, and maintain the payment service and dashboard.
• To process merchant subscriptions and billing through Stripe.
• To send transaction webhooks and service-related notifications.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To comply with legal obligations that apply to us.

We do not sell personal data, and we do not use it for third-party advertising.

We share data only as needed to run the service:

• Blockchain networks and relayers — to broadcast and settle transactions (inherently public).
• Stripe — to process subscription billing.
• Infrastructure providers — hosting, database, and logging used to operate the service.
• Legal — where required by law or to protect our rights and users.

The dashboard uses a strictly necessary, signed session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies. The public marketing site does not require cookies to browse.

We retain merchant account and configuration data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and security needs. On-chain transaction data persists permanently on the blockchain and is outside our control.

We protect data with industry-standard measures, including password hashing (bcrypt), one-way hashing of API/public keys, signed webhooks, and encryption in transit (TLS). No method of transmission or storage is perfectly secure, but we work to safeguard your information.

Merchants may access, update, or delete their account data from the dashboard or by contacting us. Because payers have no account and we hold no payer personal data, there is generally nothing for us to retrieve or delete for a payer; public on-chain records cannot be altered by us.

Solo Pay is intended for businesses and is not directed to children under the age of 18. We do not knowingly collect data from children.

We may update this policy; material changes will be reflected in the “Last updated” date above. For privacy questions or requests, contact solo-pay@supertrust.club.