Privacy Policy

    Last updated: 8/7/2026

    Our Privacy Commitment

    DefiPOS is built on the principle of minimal data collection and zero data sharing. We do not sell, rent, or share your information with third parties. Your data stays with you.

    What We Collect (Minimal)

    Account Information

    Email address only. Required for account recovery and authentication. No name, no phone number, no identity verification.

    If you sign up with Google OAuth, we receive only your email address from Google.

    Wallet Addresses

    Your cryptocurrency wallet addresses for payment routing. These are stored encrypted and are only used to direct customer payments to your wallets.

    We never have access to your private keys or funds. Payments go directly to your addresses.

    Optional Transaction History

    Transaction records are optional and configurable. You can disable transaction logging entirely in settings.

    When disabled, we confirm payment via blockchain verification and immediately discard the record. Only on-chain data persists.

    What We Don't Collect

    • ✗ No personal identification (name, address, phone)
    • ✗ No KYC (Know Your Customer) verification
    • ✗ No government-issued ID documents
    • ✗ No payment card information
    • ✗ No browsing history or behavioral tracking
    • ✗ No device fingerprinting
    • ✗ No analytics or marketing cookies

    IP Address Handling

    We do not link IP addresses to user accounts. Server-level access logs are used solely for DDoS protection and security monitoring, and are automatically purged every 7 days. IP addresses are never stored in our application database.

    How We Use Your Information

    The minimal data we collect is used exclusively for:

    • Authentication: Email for login and account recovery
    • Payment Routing: Wallet addresses to direct customer payments
    • Optional Record-Keeping: Transaction history (if enabled by you)
    • Service Communication: Critical security updates only (no marketing)

    Zero Data Sharing Policy

    We do not share, sell, rent, or disclose your data to anyone.

    • ✓ No third-party analytics services
    • ✓ No advertising networks
    • ✓ No data brokers
    • ✓ No marketing partners
    • ✓ No government agencies (except when legally compelled by valid court order)

    Non-Custodial Architecture

    DefiPOS operates as a non-custodial payment monitor. This means:

    • We never hold, control, or have access to your cryptocurrency funds
    • Payments go directly from customer wallets to your wallet addresses
    • We cannot freeze, reverse, or confiscate transactions
    • Your private keys remain exclusively in your possession
    • Blockchain verification occurs independently of our servers

    Third-Party Blockchain Infrastructure

    DefiPOS uses third-party blockchain RPC providers (NowNodes, TronGrid, and public nodes) to monitor and verify cryptocurrency transactions.

    Important Note

    While we do not share your account data with blockchain RPC providers, these nodes see public on-chain interactions as part of normal blockchain operation.

    • • RPC nodes can observe wallet addresses and transaction amounts (public blockchain data)
    • • We do not send your email, business name, or any identifying information to these providers
    • • Blockchain data is inherently public and visible to anyone running a node
    • • We use multiple providers to avoid single-point dependency

    Data Retention

    Account Data

    Email and wallet addresses are retained while your account is active. Delete your account at any time to permanently remove this data.

    Transaction History (Optional)

    If enabled, transaction records are stored locally in your browser and on our servers. You can disable this feature or delete individual records at any time. When disabled, no transaction history is retained.

    Session Data

    Temporary session tokens are deleted upon logout or after 30 days of inactivity.

    Data Security

    • TLS 1.3 encryption for all data in transit
    • AES-256 encryption for data at rest
    • Wallet addresses stored with additional encryption layer
    • No plaintext password storage (bcrypt hashing)
    • Regular security audits
    • Minimal attack surface due to minimal data collection

    Your Rights

    • Access: View all data we have about you (email + wallet addresses)
    • Deletion: Delete your account and all associated data permanently
    • Export: Download your transaction history (if enabled)
    • Opt-Out: Disable transaction logging at any time
    • Portability: Export your data in standard formats

    Cookies

    We use only essential session cookies for authentication. No tracking cookies, no analytics cookies, no advertising cookies. You can disable cookies entirely, but this will prevent you from logging in.

    Legal Compliance

    We will only disclose user data when:

    • Required by valid legal process (court order, subpoena)
    • Necessary to prevent imminent harm or illegal activity
    • You explicitly consent to disclosure

    We will notify affected users of legal requests unless prohibited by law.

    Children's Privacy

    DefiPOS is not intended for users under 18 years of age. We do not knowingly collect information from children.

    Changes to This Policy

    We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email. Continued use of the service after changes constitutes acceptance.

    Contact Us

    Questions about privacy? Contact us at [email protected]