Privacy Policy

Account data: your email address, password hash, name, and language preference. Order data: amounts and currencies, the recipient account details you enter, the payment receipts you upload, order status history, and the marketplace references (order and merchant identifiers) involved in executing your order.

Usage data: pages visited, actions taken in the app, approximate location derived from IP, device and browser type — used for analytics and service improvement. Support data: messages you send us.

To execute your orders (including receipt verification and routing through peer-to-peer marketplaces), to send transactional emails (verification codes, receipts, status updates, security alerts), to operate fraud-prevention and rate-limiting controls, to produce aggregated analytics about service performance, and to comply with legal obligations.

Our automated software agent processes order data to orchestrate your transfers. We do not sell your personal data and we do not use it for third-party advertising.

Processors acting on our instructions: marketplace infrastructure (currently Bybit) where your orders are executed, cloud storage for receipt images (Cloudinary), email delivery (Resend), and hosting providers. These parties process data under their own terms and ours.

We may disclose data where required by law, court order, or to protect the rights, safety, and property of our users or the public. Marketplace merchants you trade with necessarily see the payment details relevant to your trade — that is inherent to peer-to-peer execution.

We keep order and account data for as long as your account is active and afterwards as required for legal, accounting, and dispute purposes. Receipt images are retained for auditability of completed orders. We apply industry-standard measures: hashed credentials, encrypted transport, access controls, and rate limiting; no method is 100% secure.

Depending on your jurisdiction (e.g. GDPR, NDPR, and similar laws) you may have rights to access, correct, export, or delete your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. To exercise them, email privacy@payva.xyz. Deleting data needed to complete an in-flight order will cancel the order.

Order execution routes through international marketplaces; your data may therefore be processed in countries other than yours, with safeguards appropriate to the transfer. We use a small number of functional cookies/tokens (session, locale) and privacy-respecting analytics; we do not use advertising trackers.

We may update this policy; material changes are announced by email or in-app notice before taking effect. Contact: privacy@payva.xyz.