Merchant Privacy Policy

Types of Data Collected

We collect only the Personal Data that is necessary to provide the Service, to keep Accounts secure, and to comply with the law. The data We collect depends on the features You use.

Business and Owner Data

When a Merchant registers for an Account, We ask for information about the business and about the person who owns or runs it. This includes:

• Company name, trading name, registration number, country of registration, website and business category
• Owner’s full name, nationality, country of residence and date of birth
• Phone number and country dialling code
• Email address, which must be verified before You can sign in
• Password (transmitted in encrypted form and used solely to authenticate You)
• Expected monthly and annual volumes, and minimum and maximum transaction amounts

You are responsible for ensuring that the information You provide to Us is accurate, complete and kept up to date.

Business Verification Data

As a provider of payment services to businesses, We are required to verify the Merchants We work with and the people behind them. During Business Verification, We may ask for:

• Company registration documents and proof of the business address
• Details of directors, owners and beneficial owners, including identity documents and proof of address
• Information about the business activities, the source of funds and the expected use of the Account
• The status and outcome of Business Verification

Financial and Transaction Data

When You use the financial features of the Service, We collect:

• Wallet data: balances and the USDT deposit addresses generated for the Account on each supported network
• Payment data: amounts, coins, networks, wallet addresses, order IDs, transaction identifiers, dates and status of the payments a Merchant receives
• Withdrawal data: destination wallet addresses, networks, amounts, fees, dates and approval status
• P2P transfer data: the recipient Merchant’s email address, the amount, the fee and the status of the transfer
• MT5 data: the MT5 account numbers and names linked to the Account, MT5 transfers, and Your auto-transfer settings
• Fee data: the transaction and withdrawal fees that apply to the Account

When You provide Personal Data about another person, such as a recipient of a transfer, You confirm that You are entitled to share it with Us for that purpose.

Customer Data

When a Customer pays a Merchant through the Service, We process the data needed to complete and record that payment, such as the Customer’s wallet address, the amount, the order ID and, where the Merchant sends it to Us, the Customer’s name or email address. We use this data to process the payment, to show it to the Merchant, and to meet Our legal obligations, including fraud and financial crime checks.

Each Merchant is responsible for its own relationship with its Customers, including telling them how their data is shared with Us and having a lawful basis to share it.

Developer and Integration Data

When You use the Developer API, We store Your public key, a protected record of Your secret key, the IP address You allow, Your webhook addresses and Your success and failure redirect addresses. We also keep records of API calls and webhook deliveries to operate the Service, help You troubleshoot and keep the Service secure.

Account Security Data

• Two-factor authentication (2FA) configuration data
• Your Transaction PIN, stored in protected form and used only to confirm transfers and withdrawals
• Login activity, including the date and time of each login, Your IP address, Your device and browser type, and the approximate city and country derived from Your IP address
• Records of security events, such as password and PIN changes, secret key changes and 2FA verification attempts

Customer Support Data

When You contact Us by email or through live chat, We collect the content of Your messages, any details You share, such as transaction details You paste into a message, and Our correspondence with You.

Usage Data

Usage Data is collected automatically when using the Service.

When You access the Service through a mobile device, We may collect certain information automatically, including the type of mobile device You use, Your mobile operating system and version, the version of the Application, Your network connectivity status, and the IP address of Your mobile device.

We use Your IP address to determine Your approximate location at country and city level. We use this to detect suspicious activity, such as a sign-in from a new device or location, and to meet Our legal obligations.

Information Collected while Using the Application

While using Our Application, and only with Your prior permission, We may access Your Device’s camera so that You can scan another Merchant’s CentPay P2P QR code. The camera image is used only on Your Device to read the QR code, and We do not store or upload it.

You can enable or disable camera access at any time through Your Device settings. Disabling access means You will need to enter the recipient’s email address yourself.

Information We Do Not Collect

For transparency, the Application does not collect:

• Your precise GPS location
• Your contacts or address book
• Your Device’s advertising identifier
• Audio or recordings from Your microphone
• Your browsing activity on other websites or applications
• Health or medical information

We do not track You across applications or websites owned by other companies.

Sensitive Personal Data

Some of the data We collect, such as identity documents, financial and transaction information, API Keys and login credentials, is considered sensitive. We process this data only where necessary for the purposes described in this Privacy Policy, and We protect it with enhanced security measures.

We do not intentionally collect special categories of data, such as data about health, religious beliefs or political opinions, and We ask that You do not include such information in Your communications with Us.