Skip to content
Legal

Privacy Policy

How this Payora instance handles data. The Operator is the data controller.

1 min readSections: 5

Data we store

Account email and a hashed password; API keys (the secret is encrypted at rest); invoices, on-chain settlement records, balances, transfers and payout requests; minimal request metadata (IP, timestamp) for security and rate-limiting.

What we do not store

We never store private keys or seed phrases — Payora derives receive addresses from public material only, and payouts are signed offline. We do not sell data.

Cookies

Strictly-necessary cookies only: a session cookie and a CSRF token. No third-party tracking or advertising cookies.

Third parties

To detect deposits and prices, the instance queries public blockchain explorers and price feeds. Outbound webhooks are sent only to URLs you configure.

Retention & rights

Financial records are retained as required for accounting and legal compliance. To request access or deletion of personal data, contact the Operator.

FAQ

Frequently asked questions

Straight answers, including the uncomfortable ones: custody, fees and what happens when something goes wrong.

Help centre

What personal data does Payora store?

Your account email and a hashed password, your API key (the secret is encrypted at rest), invoices, on-chain settlement records, balances, transfers and payout requests, plus minimal request metadata such as IP address and timestamp for security and rate-limiting.

Does Payora store private keys or seed phrases?

Never. Receive addresses are derived from public key material only, and payouts are signed offline. There is no private key on the server to store, leak or subpoena.

Do you sell data or run advertising trackers?

No. There are no advertising cookies and no cross-site ad tracking, and data is not sold. Cookies are limited to a session cookie, a CSRF token and a language preference, plus a page-view analytics counter.

How do I request access to or deletion of my data?

Contact the Operator of the instance you use. Financial records are retained where accounting and legal obligations require it; see the Data Retention Policy for the specific periods.

What this page answers