Privacy policy
What we know about you, why we have it, and the one thing nobody can undo — a blockchain does not forget.
This explains what UnifiWallet Payments knows about you, why, and what you can do about it. It is deliberately specific: a privacy policy that lists every category of data anyone might conceivably collect tells a reader nothing.
The short version
- We hold merchant account data — who you are, how to reach you, what your business is.
- We hold very little about buyers: an optional reference and country, the wallet address that paid, and an email address only when a merchant asks us to send a receipt.
- We hold no card numbers, ever, because there are none.
- We do not sell data, run advertising, or build profiles of buyers.
- Blockchain data is public and permanent. We cannot delete it, and neither can you.
What we collect, and why
If you are a merchant
| Data | Why we have it | Basis |
|---|---|---|
| Name, email, password verifier | To create and secure your account. We store a verifier, not your password. | Performance of our contract with you |
| Business name, country, website | To tell whether we can serve you, and to meet our own obligations | Contract and legal obligation |
| Settlement addresses | To build the transactions that pay you | Contract |
| Payments, settlements, refunds, invoices | To operate the service and to keep records we are required to keep | Contract and legal obligation |
| Audit log of consequential actions | So a changed settlement address has an author. This protects you. | Legitimate interests — security |
| IP address and request metadata | Rate limiting, abuse prevention, debugging a request you report | Legitimate interests — security |
If you are a buyer
We hold as little as the job allows, and the merchant decides most of it:
| Data | When | Note |
|---|---|---|
| Wallet address that paid | Always | It is already public on the blockchain |
| Amount, asset, chain, timestamps | Always | Also already public |
| Merchant's own reference for you | If the merchant sends one | Opaque to us |
| Country | If provided, for tax | Country only — not an address |
| Email address | Only for a receipt you asked for | Encrypted at rest, decrypted once to send |
| Refund address | If you give one at checkout | So a refund can reach you |
We do not set advertising cookies, do not track buyers across sites, and do not attempt to identify the human behind a wallet address.
What a blockchain means for erasure.
Payments happen on public networks. The address, amount, token and time are recorded there by design, visible to anyone, and permanent. Nobody can edit or delete them — not us, not the merchant, not the network's operators.
So a request to erase your data can only reach our records. We can delete the email address, the reference and the country we hold, and we can destroy the key that decrypts them, which makes what remains unreadable. We cannot remove a transaction from a blockchain, and any service telling you otherwise is describing something it cannot do.
Who else sees it
We share the minimum, with providers doing a specific job for us, under contract:
| Who | What they see | Why |
|---|---|---|
| Our email provider | The recipient address and the message | To deliver receipts, verification and alerts |
| Sanctions screening provider | A wallet address | To check it against sanctions lists before money moves |
| Blockchain node providers | Addresses and transactions | To read and submit transactions — this data is public anyway |
| Our hosting provider | Whatever passes through the servers | To run the service |
We disclose data to authorities where we are legally required to, and we will tell you unless we are forbidden from doing so. We do not sell data and do not share it for anyone else's marketing.
How long we keep it
- Payment and settlement records: as long as tax and accounting law requires, typically several years. These are financial records and cannot simply be deleted on request.
- Buyer email addresses: encrypted, and only while there is a reason to hold them.
- Account data: for as long as the account exists. Unverified accounts that never traded are removed after fourteen days.
- Logs: a short window, and checkout tokens are redacted from them because they are capabilities.
How it is protected
- Credential secrets and buyer email addresses are encrypted at rest; the API secret you are shown once is never shown again.
- Sessions use a host-locked, HTTP-only cookie the browser will not hand to JavaScript.
- Anyone who can move money must use a second factor.
- Services bind to loopback and are reached only through the reverse proxy; requests that move money must be signed.
- We hold no funds, so a breach of our systems cannot drain your wallet. This is the strongest security property we have, and it comes from the architecture rather than from our diligence.
Your rights
Depending on where you live you may have rights to access, correct, delete, restrict or object to our use of your data, to receive a copy in portable form, and to complain to your data protection authority. To exercise any of them, write to privacy@unifiwallet.com.
Two honest limits. We cannot delete what is on a blockchain. And we cannot delete financial records we are legally required to keep — though we can restrict what they are used for.
If you are a buyer asking us
We usually hold your data on behalf of the merchant you bought from, and they decide what happens to it. Ask them first; we will help them answer, and we will answer directly where the data is ours rather than theirs.
Cookies
The documentation site sets none. The merchant panel sets one session cookie, which is what keeps you signed in — there is no analytics or advertising cookie on either.
International transfers
Where data is processed, and the safeguards used when it leaves that place, are to be completed on legal advice once hosting and provider arrangements are final. Stating a mechanism we have not put in place would be worse than saying it is outstanding.
Changes
We will post changes here and date them, and tell account owners by email when a change is material.
Contact
privacy@unifiwallet.com for anything on this page.