PayVectro ("PayVectro," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website (payvectro.com) and use our multi-chain cryptocurrency transaction management platform (collectively, the "Platform"). This Privacy Policy describes the types of information we collect, how we use it, and the choices available to you regarding your information.
By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is incorporated by reference into our Terms of Service. Capitalised terms not defined in this document have the meanings assigned to them in the Terms of Service.
1. Information We Do Not Collect
The architecture of the Platform is designed to minimise the collection and retention of sensitive financial data. Specifically, we do not collect, store, or have access to:
(a) your plaintext private keys, seed phrases, or wallet passphrases;
(b) your account password in plaintext (passwords are hashed using the bcrypt algorithm prior to storage and cannot be reversed);
(c) recipient wallet address lists that you upload or enter for batch transactions (these are processed in-memory and not persisted beyond the scope of transaction execution).
2. Information We Collect
2.1. Account Information
When you register for an account, we collect your name and email address. If you authenticate via a third-party identity provider (such as Google OAuth), we receive the name, email address, and profile identifier associated with your account on that provider.
2.2. Encrypted Wallet Credentials
When you import a wallet, the private key or seed phrase you provide is encrypted server-side using a symmetric key derived from your account password. We store only the resulting ciphertext. Because we do not retain your plaintext password, we have no technical capability to decrypt or access the underlying credential.
2.3. Transaction Records
We maintain records of transactions initiated through the Platform, including transaction hashes, source and destination addresses, amounts, network identifiers, and timestamps. These records are necessary for the Platform's transaction tracking functionality and for audit and security purposes.
2.4. Audit Logs
Certain security-sensitive actions (such as wallet imports, key reveals, and bulk send operations) generate audit log entries that record the action type, timestamp, and the IP address from which the request originated. These logs exist to support account security and incident investigation.
2.5. Automatically Collected Information
When you access the Platform, our servers may automatically record standard technical data, including your IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. This information is used to maintain the security and performance of the Platform.
3. How We Use Your Information
We use the information we collect for the following purposes:
(a) to provide, operate, and maintain the Platform and its features;
(b) to authenticate your identity and manage your account;
(c) to process and track transactions you initiate through the Platform;
(d) to send service-related communications, including security alerts and account verification emails;
(e) to detect, prevent, and investigate fraud, abuse, or security incidents;
(f) to comply with applicable legal obligations.
4. Third-Party Services
4.1. To execute blockchain transactions, the Platform communicates with third-party Remote Procedure Call (RPC) node providers (such as Infura, Alchemy, or public network endpoints). When a transaction is broadcast, the RPC provider receives the signed transaction payload and the IP address from which the request originates. The handling of this data is governed by the respective provider's privacy policy, which we do not control.
4.2. If you authenticate using Google OAuth, your authentication session is handled by Google's identity services. We receive only the information described in Section 2.1 and do not receive or store your Google account password.
5. Data Retention
We retain your account information and associated data for as long as your account remains active or as needed to provide you with the Platform's services. If you request deletion of your account, we will delete or anonymise your personal data within a commercially reasonable timeframe, except to the extent that retention is required by applicable law or is necessary to resolve disputes or enforce our agreements.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
(a) access the personal data we hold about you;
(b) request correction of inaccurate data;
(c) request deletion of your personal data, subject to applicable legal retention requirements;
(d) object to or restrict certain types of processing.
These rights may be exercisable under the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or other applicable data protection laws. To exercise any of these rights, please contact us at [email protected].
7. Security
We implement commercially reasonable administrative, technical, and physical safeguards to protect the information we collect. These measures include encrypted storage of wallet credentials, bcrypt password hashing, HTTPS transport encryption, and access controls. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your data.
8. Children
The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child under 18, we will take steps to delete such information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last modified" date at the top of this page. Your continued use of the Platform following any changes indicates your acceptance of the updated Privacy Policy.
10. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].