Privacy Policy

1. Data we collect

• Merchant account: email and business name
• Settlement wallet address, stored so payouts can be sent; it is not shown broadly in the UI
• Staff records needed for POS (for example names and roles); PINs are stored hashed
• Payment and order metadata: amounts, tips, status, ids, and timestamps
• Early-access form fields, if you submit that form

2. What we do not collect

• Merchant private keys
• Full card numbers — card data is handled by third-party onramp providers

3. How we use data

We use this data to:

• Operate POS and digital payments
• Confirm payments
• Provide support
• Protect security and help prevent fraud
• Improve the product

4. Sharing

We may share data with:

• Infrastructure providers (for example Supabase and hosting)
• Blockchain networks, where transaction data is public by design
• Onramp providers when a customer chooses the card flow, under those providers’ terms

We do not sell personal data for advertising.

5. Retention

We keep data while the account is active and as needed for legal and operational purposes.

6. Security

We use access controls, hashed PINs, and merchant isolation to limit who can see account data. No method is perfectly secure.

7. Your choices

You may request access, correction, or deletion of your account data through Pinbay support. Some payment records may be kept where we have a legal or operational need.

8. Contact

Privacy questions: use the support channel published by Pinbay.