Privacy notice
Draft version of 5 October 2026
This is a pilot draft. It is not legal advice.
What we claim — and what we do not
We aim for protection from the casual observer: someone looking at public payment records should not be able to add up a business's revenue from one fixed receiving address once the rotating-address path is live. We never claim total privacy, anonymity, or that our systems cannot see your sales.
What our systems know
Our systems know which receiving addresses belong to which business and which person. They store account data (such as e-mail and public identifiers), charges, sales history, invites, split policies and receipts needed to run the product. They do not hold your funds.
What stays visible in payment records
Payment amounts in the supported currencies are always visible in public payment records. A sale, a refund, a consolidation or a transfer out can be seen there. Spending and consolidation can re-link addresses that were separate while money was at rest.
The live sale today
Until the rotating-address sale path is the default, the current path can still expose a business's revenue through a fixed receiving address. The privacy layer is being built; this notice states that honestly.
Device unlock and sessions
Account recovery uses a device unlock bound to this product. A stolen session alone should not rebuild your secret key. While you unlock to confirm an operation, treat that moment as sensitive.
Who this notice is for
It is for everyone who uses the product. Commission earners and owners see the same limits: we cannot promise that a commission earner can prove on their own what they were promised beyond what the product already shows.
Changes
When this notice changes in substance, we publish a new version and ask for acceptance again before the next charge.