Welcome to Coinpayon (https://coinpayon.com/). We are a platform providing cryptocurrency payment gateway solutions. Coinpayon is committed to protecting the personal data, privacy, and information assets of both Merchants (who integrate our gateway) and Customers (who make payments) when interacting with our system, API, or payment widgets.
1. Types of Data We Collect
To operate a stable and secure payment gateway service, Coinpayon collects and processes the following groups of data:
• Information You Provide Directly:
o Account Data: Email address, phone number, and securely hashed password when you register a system account.
o Identity Verification Data (KYC/AML): Full name, date of birth, nationality, government-issued ID/Passport photos, and a selfie portrait. For corporate Merchants, we also collect business registration documents and details of the legal representative for anti-money laundering compliance.
o Payout Configurations: Cryptocurrency wallet addresses configured by the Merchant to receive settlements.
• Information Collected Automatically Through Payments:
o Transaction Data: Sending wallet address, receiving wallet address, transaction hash (TxID), transaction amount, token/coin type, timestamp, and invoice status.
o Technical & System Log Data: IP address, device type, operating system, geolocation data (Country/City), and system activity logs generated via Coinpayon's API or Webhook interactions.
o Cookies and Tracking Technologies: We use cookies to maintain active sessions, store language preferences, and protect the website from malicious activities or bot attacks.
2. Special Notice on the Nature of Blockchain Data (On-chain)
When you execute any transaction through the Coinpayon payment gateway, core data—including wallet addresses, asset transfer amounts, timestamps, and TxIDs—is recorded on public decentralized blockchains (such as Bitcoin, Ethereum, TRON, etc.).
Due to the decentralized and immutable nature of blockchain technology, this on-chain data cannot be modified, deleted, or hidden by Coinpayon or any third party. Your right to request data erasure does not apply to information already distributed across these public ledgers.
3. Purposes and Legal Basis for Processing Data
Coinpayon processes your personal information based on three core pillars:
• Performance of a Contract: Authenticating customer payments, verifying invoice statuses automatically via API integrations, processing payouts to Merchants, and delivering customer support.
• Compliance with Legal Obligations (AML/KYC): Performing screening and identity verification on Merchants to prevent financial fraud, money laundering, terrorist financing, or the unauthorized use of the gateway for illicit goods or services.
• Legitimate Interests and Security: Monitoring the network to detect and mitigate DDoS attacks, double-spending attempts, exploits, and malware while optimizing the performance and speed of our payment systems.
4. Data Sharing and Disclosure
Coinpayon does not sell, rent, or trade your personal data. Data is only shared within the following limited scopes:
• Public Blockchain Networks: Your transaction details are publicly visible on blockchain explorers for anyone to verify.
• Integration Partners: When a Customer pays an invoice, Coinpayon transmits the final invoice status (Success/Failed/Underpaid) back to the Merchant’s system so they can fulfill the order.
• Third-Party Service Providers: Trusted third parties hosting our secure cloud infrastructure or providing automated identity verification (KYC) solutions, bound by strict confidentiality agreements.
• Law Enforcement Agencies: We will disclose account information, transaction logs, and KYC data to regulatory or law enforcement bodies only when presented with a legally binding written request or court order during financial crime investigations.
5. Data Retention Period
We store your personal data (off-chain data on our servers) for as long as your account remains active. Upon account termination, identity records (KYC) and financial transaction histories will be securely retained for an additional 5 to 10 years (depending on relevant international jurisdictions) to comply with anti-money laundering (AML), tax, and financial auditing laws before being permanently purged.
6. Your Rights (Regarding Off-chain Data)
Excluding immutable on-chain blockchain data, you hold the following rights regarding information stored on Coinpayon’s servers:
• The right to access, check, and request a copy of your personal data.
• The right to correct or update inaccurate or incomplete information.
• The right to request account closure, restrict processing, or request data deletion (provided it is no longer bound by the legal and financial retention requirements outlined in Section 5).
• The right to opt-out of marketing emails or newsletters sent by Coinpayon.
7. Security Measures
Coinpayon implements high-level technical and organizational security standards:
• All data transmitted is fully encrypted using robust HTTPS protocols with SSL/TLS certificates.
• Sensitive information, such as KYC records, is stored on isolated server clusters and encrypted at rest (AES-256).
• Access to data is strictly restricted to authorized compliance and security personnel bound by non-disclosure agreements.
• CRITICAL WARNING: Coinpayon never requests your Private Keys or Wallet Seed Phrases. You are solely responsible for keeping this information confidential. Never share it with anyone—including our support staff—and always activate Two-Factor Authentication (2FA) on your Coinpayon account.
8. Amendments to This Policy
Coinpayon reserves the right to update this Privacy Policy at any time to reflect shifts in the cryptocurrency market regulatory landscape or international laws. If significant changes are made, we will notify you via email or publish a prominent notice within your account dashboard before the update takes effect.