Privacy Policy

When you create an account and use Payzora, you provide us with:

• Account Information: Name, email address, password (encrypted)
• Profile Information: Business name, wallet addresses, country
• Invoice Data: Client names, email addresses, invoice amounts, descriptions
• Payment Information: Cryptocurrency wallet addresses, transaction details
• Communications: Support messages, feedback, survey responses

When you use our Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent, actions taken
• Device Information: IP address, browser type, operating system, device type
• Cookies and Tracking: Session cookies, analytics cookies (see Cookie Policy)
• Log Data: Server logs, error reports, performance data

• Payment Processors: Transaction confirmations from our crypto payment processor
• Analytics Services: Aggregated usage statistics from analytics providers

We use your information to:

• Provide the Service: Create accounts, process invoices, facilitate payments
• Communicate: Send transactional emails (invoice notifications, payment confirmations)
• Improve: Analyze usage patterns, fix bugs, develop new features
• Security: Detect fraud, prevent abuse, protect against security threats
• Compliance: Meet legal obligations, enforce our Terms of Service
• Marketing: Send promotional emails (you can opt out anytime)
• Support: Respond to your questions and provide assistance

We process your data based on:

• Contract Performance: To provide the Service you signed up for
• Legitimate Interest: To improve our Service, prevent fraud, and ensure security
• Legal Obligation: To comply with laws (e.g., tax, AML/KYC)
• Consent: For marketing communications (you can withdraw consent anytime)

We may share your information with:

Service Providers

• Payment Processor: To process cryptocurrency payments
• Email Service: Resend (to send transactional and marketing emails)
• Hosting: Vercel and Supabase (to host our platform and database)
• Analytics: To understand how our Service is used

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to:

• Comply with legal obligations (AML, KYC, tax reporting)
• Protect our rights, property, or safety
• Prevent fraud or abuse
• Respond to law enforcement requests

Business Transfers

If Payzora is acquired by or merged with another company, your information may be transferred to the new entity. We will notify you of such changes.

We do NOT:

• Sell your personal information to third parties
• Share your data with advertisers
• Use your data for purposes unrelated to providing our Service

We implement industry-standard security measures to protect your data:

• Encryption: 256-bit SSL/TLS encryption for data in transit
• Password Security: Bcrypt hashing with 12 rounds for password storage
• Database Security: Row-level security (RLS) policies in Supabase
• Access Control: Limited employee access to user data
• Two-Factor Authentication: Optional 2FA for account protection
• Regular Security Audits: Periodic reviews and updates

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

We retain your data for as long as:

• Your account is active
• Needed to provide the Service
• Required by law (e.g., 7 years for financial records)

After Account Deletion: We delete most personal data within 30 days. Some data (transaction logs, financial records) may be retained longer for compliance purposes.

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing for direct marketing or legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing emails anytime

To exercise any of these rights, contact us at privacy@payzora.io or use the settings in your account dashboard. We will respond within 30 days.

Types of cookies we use:

• Essential Cookies: Required for the Service to function (e.g., session management)
• Analytics Cookies: Help us understand how you use the platform
• Preference Cookies: Remember your settings (e.g., dark mode)

You can control cookies through your browser settings. Note that disabling essential cookies may affect functionality.