Draft - not yet reviewed by counsel; not in force
Privacy
What Nexus Pay stores about merchants and about customers who pay.
Merchants
Account email, name, organization details, hashed passwords, MFA secrets, session and audit records (including IP addresses), API key hashes, webhook endpoints, payout wallet addresses, invoices and payment records.
Customers
The checkout does not require an account. We store the invoice the merchant created (which may include an order reference or customer reference the merchant chose), the deposit address, and on-chain transaction data (sender address, amount, transaction hash), which is public by nature.
Retention and access
Financial records are retained for [period] to support reconciliation and legal obligations. Support staff see only the data needed for a task and never signing material. Data is not sold. Optional analytics or AI features, if introduced, will not receive keys or unredacted payment data.
Your rights
[Access, correction, deletion, and complaint procedures depend on the operating jurisdiction — to be completed.]