Privacy policy

Draft. This document is under legal review and may change before launch.

Version of 25 October 2026. Data controller: ETHPAID LLC. The jurisdiction, registration number and address will be published once the company is registered. Contact: support@ethpaid.com.

1. What data we process

Data	Source	Purpose	Legal basis (Art. 6 GDPR)
Telegram ID, username, chat	Telegram bot	sign-in, notifications	contract
Store name, website, country, type of business	Merchant	service, screening of prohibited categories	contract; legitimate interest / AML law
Merchant wallet addresses, signatures	Merchant	forwarding payments, protection against substitution	contract
Invoice data: amount, description, order no.	Merchant / its website	running the service, reports	contract
Payer addresses and transaction hashes	public blockchains	payment accounting, sanctions screening	contract; law
Buyer’s refund address	buyer	helping with the refund	Merchant’s legitimate interest
Technical logs (IP, time)	servers	security, abuse prevention	legitimate interest

The website uses no cookies and no third-party trackers. Visit statistics, if enabled, use Cloudflare Web Analytics without cookies or visitor identification.

2. A note on blockchains

Transactions on public networks are visible to everyone and cannot be deleted — by us or anyone else.

Processors under contract: hosting Hetzner (Germany), Google Cloud (encrypted backups), Cloudflare (delivery network), Telegram (messages), blockchain access providers, CatFee (Tron energy rental — no personal data). Public authorities — only as required by law. Transfers outside the EEA rely on the EU standard contractual clauses.

4. Retention

Invoice and payment data — 5 years (accounting / AML). Logs — 90 days. Backups — up to 90 days.

5. Your rights

Access, rectification, erasure (except data we must keep and blockchain records), restriction, portability, objection, and a complaint to the data protection authority of your country. Requests — to support@ethpaid.com.

6. Security