🔒 ChainPay is non-custodial. We never have access to your private keys, seed phrases, or cryptocurrency funds. We only store what's necessary to run the service.
Account information: Name, email address, and (if set) a hashed password. If you sign in with Google, we receive your Google profile name and email.
Store information: Your store name, URL, and platform (WooCommerce, etc.) that you provide during setup.
xPub keys: Extended public keys you configure for address derivation. These are public by nature — they cannot be used to spend funds.
Invoice data: Payment addresses, amounts, timestamps, and transaction hashes associated with orders processed through ChainPay.
Technical data: IP addresses, browser type, and API request logs for security and debugging purposes.
If you choose to sign in with Google, we receive your name and email address from Google's OAuth service. We use this only to create and identify your ChainPay account. We do not access your Google Drive, Gmail, or other Google services.
We do not sell your personal information. We only share data with:
We retain your account data for as long as your account is active. Invoice and transaction data is retained for 5 years for legal and accounting purposes. You may request deletion of your account at any time by emailing privacy@chainpay.store.
We use industry-standard security measures including encryption at rest and in transit (TLS 1.3), bcrypt password hashing, JWT token authentication, and regular security audits. We follow responsible disclosure practices for security vulnerabilities.
We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Our dashboard uses localStorage to maintain your session.
Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to:
To exercise any of these rights, contact privacy@chainpay.store.
Privacy questions: privacy@chainpay.store
Security issues: security@chainpay.store
ChainPay · chainpay.store