Privacy Policy

1. Overview

Payzar is built with privacy as a core design principle. Unlike traditional payment processors, we do not require identity verification (KYC), government-issued documents, or tax identification. Your account is secured and identified solely by your Internet Identity principal — an anonymous, cryptographic identifier. We collect only the minimum information necessary to provide the payment processing service. This policy explains what we collect, why, and how it is protected.

2. Information We Collect

We collect the following information when you use Payzar:

• •Internet Identity Principal: Your cryptographic identifier generated by Internet Identity. This is pseudonymous by design — it does not contain your name or personal details.
• •Business Name & Email (Optional): If you voluntarily provide a business name or email address in your merchant profile for support and receipt purposes.
• •Transaction Metadata: Payment amounts, cryptocurrency types used, timestamps, transaction hashes, and payment link identifiers.
• •Wallet Addresses: Cryptocurrency wallet addresses associated with your payment links and settlement activity.
• •API Usage Logs: Records of API key usage including timestamps, endpoint paths, and response codes (no request bodies containing sensitive data are stored).
• •Support Correspondence: Messages exchanged through the in-platform chat or support tickets.

3. What We Don't Collect

Payzar explicitly does not collect:

• •Government-issued ID, passport, or driver's license
• •Social Security Number or Tax Identification Number
• •Photographs, biometric data, or selfies
• •Physical address or postal code
• •IP addresses stored beyond the scope of individual request processing (not retained in persistent storage)
• •Bank account details or fiat payment information
• •Browser fingerprinting data
• •Behavioral tracking or cross-site activity

4. How We Use Information

The information we collect is used exclusively for the following purposes:

• •Providing and operating the payment gateway service
• •Processing cryptocurrency payments and delivering PZR settlements to your account
• •Sending payment receipts and transaction confirmations (if email is provided)
• •Responding to support requests and resolving disputes
• •Preventing fraud and abuse of the platform
• •Improving platform reliability, performance, and features
• •Generating anonymized aggregate analytics (no individual-level data is sold or shared)

5. Data Storage

All Payzar merchant data — including account information, transaction records, and message history — is stored entirely within Internet Computer canisters. The Internet Computer is a decentralized blockchain network operated by a distributed set of independent node providers. This means:

• •There is no centralized database or cloud storage provider holding your data
• •Data is replicated across multiple independent data centers for redundancy
• •Storage is cryptographically secured and tamper-evident by design
• •Payzar does not use AWS, Google Cloud, Azure, or any third-party cloud infrastructure for merchant data storage

6. Cookies

Payzar uses a minimal set of cookies. We do not use advertising cookies, tracking pixels, or analytics SDKs. Session cookies are used to maintain your logged-in state via Internet Identity. For full details, see our Cookie Policy at payzar.app/cookies.

7. Third-Party Services

Payzar integrates with Internet Identity (by DFINITY Foundation) for authentication — a privacy-preserving standard that does not expose your personal identity to applications. Payzar does not integrate with advertising networks, data brokers, analytics platforms, social media tracking, or third-party payment processors. We do not sell, rent, or share your personal information with any third parties for commercial purposes.

8. Data Retention

Merchant account data and transaction history are retained for as long as your Payzar account remains active. If you choose to delete your merchant account, your personal profile data (business name, email) will be removed within 30 days. Transaction records may be retained in anonymized form for platform integrity and audit purposes. You can request account deletion at any time through the Account Settings page in your merchant dashboard.

9. Your Rights

You have the following rights regarding your merchant data:

• •Access: View all your merchant data, transaction history, and API usage logs directly in your dashboard.
• •Correction: Update your business name, email, and other profile information at any time in Account Settings.
• •Deletion: Request complete removal of your merchant profile and associated personal data via Account Settings or by contacting privacy@payzar.app.
• •Portability: Export your transaction history and merchant data in CSV format from the Analytics page.

Payzar will respond to data rights requests within 30 days.

10. Security

Payzar employs the following security measures to protect your data:

• •All authentication is handled via Internet Identity — no passwords are stored by Payzar.
• •There is no central database that could be breached; all data lives in cryptographically secured Internet Computer canisters.
• •API keys are generated as cryptographic tokens and stored as hashed values; the plaintext key is only shown once at creation.
• •All canister-to-canister communication on the Internet Computer is authenticated using cryptographic signatures.
• •Admin actions are logged in an immutable audit trail.

11. Contact

For privacy-related questions, data access requests, or deletion requests, please contact us at privacy@payzar.app. We take privacy inquiries seriously and will respond within 5 business days.