Data we store
Account email and a hashed password; API keys (the secret is encrypted at rest); invoices, on-chain settlement records, balances, transfers and payout requests; minimal request metadata (IP, timestamp) for security and rate-limiting.
What we do not store
We never store private keys or seed phrases — Payora derives receive addresses from public material only, and payouts are signed offline. We do not sell data.
Cookies
Strictly-necessary cookies only: a session cookie and a CSRF token. No third-party tracking or advertising cookies.
Third parties
To detect deposits and prices, the instance queries public blockchain explorers and price feeds. Outbound webhooks are sent only to URLs you configure.
Retention & rights
Financial records are retained as required for accounting and legal compliance. To request access or deletion of personal data, contact the Operator.