Pinbay
Home

Privacy Policy

Last updated: October 27, 2026

1. Data we collect

  • Merchant account: email and business name
  • The public wallet address the merchant chooses for receiving payments. This is the only wallet information Pinbay stores.
  • Staff records needed for POS (for example names and roles); PINs are stored hashed
  • Payment and order metadata: amounts, tips, status, ids, and timestamps. For cash payments, this also includes the cash tendered, change given, and the staff member who recorded it
  • Cash drawer records: opening float, cash paid in and out with reasons, counted and expected amounts, and close notes
  • Business records you add in Pinbay, such as expenses (date, vendor, amount, category, invoice number, and notes), inventory, menu items, and shifts
  • Order details entered at the point of sale, including an optional customer label (for example a name or table)
  • Transaction hashes of confirmed payments, which are public on the blockchain
  • If Telegram notifications are enabled for your account, the Telegram chat ID where payment confirmations are sent
  • Early-access form: name, email, business name, and optional notes (phone/city), if you submit that form, so we can contact the applicant

Customers do not need a Pinbay account to pay. Pinbay does not ask customers for their name, email, or phone number to complete a payment.

We use IP addresses to limit abuse (rate limiting). Our hosting provider may also log IP addresses as part of normal operation.

A public wallet address is used only to direct a customer’s payment to your business and to confirm that it arrived. It cannot be used to move funds on your behalf.

Pinbay is not a bank and does not hold or custody merchant funds. Payments go directly to the merchant’s wallet.

2. What we never collect

Pinbay never asks for, collects, or stores:

  • Seed phrases (recovery phrases) or private keys
  • API secrets, including Coinbase or other exchange API secrets
  • Coinbase or other exchange passwords
  • Card numbers or other card details. Pinbay does not accept or process card payments.

If anyone claiming to be Pinbay asks for your seed phrase, private key, or API secret, do not share it.

3. How we use data

We use this data to:

  • Operate POS and digital payments
  • Confirm payments
  • Contact early-access applicants
  • Provide support
  • Protect security and help prevent fraud
  • Improve the product

4. Sharing

We may share data with:

  • Infrastructure providers: Supabase (database and sign-in) and Vercel (hosting)
  • Alchemy, a blockchain data provider, which receives merchant wallet addresses so incoming payments can be detected
  • Telegram, if payment notifications are enabled, which receives the payment confirmation message (business name, amount, and payment details)

We do not sell personal data for advertising. We do not sell the early-access list.

5. Retention

We keep data while the account is active and as needed for legal and operational purposes.

6. Security

We use access controls, hashed PINs, and merchant isolation to limit who can see account data. No method is perfectly secure.

7. Your choices

You may request access, correction, or deletion of your account data through Pinbay support. Some payment records may be kept where we have a legal or operational need.

8. Contact

Privacy questions: use the support channel published by Pinbay.