Crypteo is a non-custodial payment gateway, so we collect as little as we can. We never have access to your private keys or your crypto, and we only collect the information needed to run checkout, your dashboard and our support. This policy explains what that is and what we do with it.
1. Information we collect
Merchants
- Account details: your name, email address, a hashed password and your two-factor settings.
- Configuration: the public wallet addresses you register, webhook URLs, payment links and API keys (stored so they can be verified and revoked).
- Payment records: the payment sessions you create, their amounts, statuses and the public transaction hashes that settled them, plus logs of the webhooks and emails we sent you.
Buyers
Buyers don't need an account. The checkout page records the payment session and the public on-chain transaction that pays it. We don't ask buyers for their name or email ourselves; if a merchant includes a customer email address when creating a payment, we store it with that payment on the merchant's behalf. Merchants are responsible for their own buyers' privacy.
Visitors and contact form
If you contact us, we receive the name, email address and message you send, and keep them with the IP address the message came from so we can answer it and stop abuse. Like most websites, our servers process IP addresses to deliver pages and to rate-limit requests against abuse.
2. How we use it
We use this information to provide the service: to detect and confirm payments, send webhooks and email notifications, secure your account, answer support requests and improve Crypteo. We do not sell your personal information, and we do not use it for third-party advertising.
3. Blockchain data
Blockchain transactions are public and permanent. Your receiving addresses and every payment made to them can be seen by anyone with a block explorer, independently of Crypteo. We read this public data to confirm payments, but we do not control its visibility and cannot remove it.
4. Cookies
We use a session cookie to keep you signed in to the dashboard. It is strictly necessary for the service and isn't used for tracking.
5. Service providers
We share data only with providers that help us run Crypteo, and only as much as they need:
- hosting and database providers that store the service's data;
- an email delivery provider that sends account and payment notifications;
- Cloudflare Turnstile, which may check that sign-up, login and contact forms are used by a person;
- blockchain data and price providers, which receive the public addresses and transaction lookups needed to confirm payments, not your personal details.
We may also disclose information where the law requires it.
6. Security and retention
Passwords are hashed, authenticator secrets are encrypted, and access to production data is restricted. We keep account and payment records while your account is active. When you delete your account, it is deactivated straight away; we may keep payment records for as long as we need them for legal, accounting or dispute purposes.
7. Your rights
You can view and update your account details in the dashboard and delete your account at any time. Depending on where you live, you may also have the right to access, correct, export or erase your personal data, or to object to how we process it. To make a request, email [email protected].
8. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new “last updated” date and, for material changes, notify merchants by email.
9. Contact
Questions about privacy? Email [email protected] or use the contact form.