Privacy Policy

This Privacy Policy explains how [Company Legal Name] ("we") handles information when you use Crypto IPG (the "Service").

1. Information we collect

• Account data: email, hashed password, display preferences, plan.
• Merchant configuration: your website domain(s), verification records, and the public wallet addresses you enter (public blockchain data — not private keys).
• Transaction metadata: invoice amounts, currencies, order references, buyer email if you provide it, and on-chain transaction identifiers.
• Technical data: IP address, log and usage data needed to operate and secure the Service.

We do not hold your private keys or custody of funds.

2. How we use it

• To provide the Service — create payment requests, detect and confirm on-chain payments, send webhooks, and show your dashboard.
• To secure accounts, prevent abuse, and comply with legal obligations.
• To communicate about your account (e.g. password resets, service notices).

3. Cookies

We use strictly necessary cookies to keep you signed in and protect forms (session and CSRF). We do not use them to track you across other sites.

4. Third parties

To run the Service we share limited data with providers such as blockchain data/APIs (to check addresses and confirmations), exchange-rate sources, our hosting provider, and email delivery. Public blockchains are, by design, public and permanent; addresses and transactions you use are visible on-chain.

5. Retention

We keep account and transaction records for as long as your account is active and as needed for legal, tax, and accounting purposes, then delete or anonymize them.

6. Security

We use reasonable technical and organizational measures (hashed passwords, signed webhooks, optional two-factor authentication). No method is perfectly secure; you are responsible for protecting your credentials and keys.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Contact us to exercise them. You may also complain to your local data-protection authority.

8. International transfers

Your data may be processed in countries other than yours. Where required, we use appropriate safeguards for such transfers.

9. Children

The Service is not directed to children and is intended for business use.

10. Changes

We may update this Policy; material changes will be posted here with a new date.

11. Contact

[Company Legal Name], [Address] — [privacy@yourdomain].