Privacy Policy

01Who we are

Crypto Merchant (“we”, “us”) runs the crypto payment service at cryptomerchant.online, operated from Pakistan. This policy explains what personal data we collect when you use the site, the portal, the checkout pages and the API, why we collect it, and what we do with it. You can reach us at [email protected].

02What we collect

We collect only what we need to run the service:

• Account details: your email address and name, your password (stored only as a secure hash) and your two-factor settings if you turn them on.
• Business details: your business name and store link, and anything else you add, such as country, website, support email or logo.
• Sign-in and security data: the IP address and browser details of each sign-in session, to keep your account secure.
• Language suggestion: we work out your country from your IP address on our own servers to suggest a language. We don't send your IP address to anyone else for this.
• Payout addresses you save, and the payouts and swaps you make.
• Invoice and customer data that you or your integration give us, such as customer emails and names, order IDs, descriptions and metadata.
• Payment data: deposit addresses, amounts and transaction IDs. Blockchain transactions are public by nature.
• Support messages that you or your customers send us.

03Cookies

We only use cookies the service needs: a session cookie that keeps you signed in, and cookies that remember your language, your light or dark theme, the business you last opened, and whether you closed the language suggestion. We don't use advertising or tracking cookies.

04Why we use it

We use your data:

• to create and run your account and your team;
• to create invoices, detect and confirm payments, and credit, sweep, swap and pay out your coins;
• to send emails you ask for, such as sales statements and team invitations;
• to keep accounts secure and to prevent fraud and prohibited uses;
• to answer support requests;
• to suggest your language and remember your preferences;
• to meet our legal obligations.

05Who we share it with

We don't sell your personal data, and we don't share it for advertising.

We share data only when it is needed to run the service: with the providers that host our servers and deliver our emails; with blockchain networks when coins are moved, which makes those transactions public; and with exchanges when swaps are made, which we do in our own name, without your personal details.

We may disclose data when the law requires it, or to protect our users and the service from fraud or abuse.

06Your customers' data

When you create invoices with customer details, you decide what to give us, and you are responsible for having the right to share it. We use it only to run your invoices, to show your payments and customers in your portal, and to handle support requests about those payments.

07How long we keep it

We keep account and business details while your account is open. After it is closed, we keep payment, ledger and payout records for as long as we need them for accounting, legal obligations and disputes. Sign-in session records are kept for a limited time, for security. Blockchain transactions are permanent and can't be deleted by anyone.

08Security

Passwords and API keys are stored only as hashes, two-factor sign-in is available, and the master recovery phrase for wallets is kept offline on paper. No system is perfectly secure, so please protect your own password and devices too.

09Your choices

You can see and correct most of your details in the portal. You can ask us for a copy of your data, or ask us to delete it, by writing to [email protected]. We may have to keep some records where the law requires it.

10Where data is processed

Crypto Merchant is operated from Pakistan. Our servers and service providers may be in other countries, so your data may be processed outside the country where you live.

11Children

Crypto Merchant is a service for businesses and is not meant for children.

12Changes to this policy

We may update this policy. We will post the new version on this page with a new date and tell you about important changes by email or in the portal.

13Translations

This policy may be shown in other languages for convenience. If a translation differs from the English version, the English version applies.

14Contact

Questions or requests about your data: [email protected].