x402x

Privacy Policy

Effective as of 12/4/2025

This Privacy Policy explains how x402x collects, uses, and protects your information when you use our platform. We are committed to protecting your privacy while providing transparent payment gateway services.

1. Non-Custodial Design

x402x operates as a non-custodial platform:

  • We do not have custody of your funds or private keys
  • Wallet connections are handled through Privy authentication
  • You maintain complete control over your assets at all times
  • Transactions are executed directly on blockchain networks

2. Information We Collect

A. Information You Provide Directly

  • Wallet Addresses: When you connect your wallet to use our services
  • Authentication Data: Wallet signatures for authentication
  • Gateway Metadata: Information you provide when creating payment gateways (name, description, pricing, target URLs)
  • Token Configurations: Supported tokens and pricing information
  • Contact Information: If you reach out for support (email, GitHub username)

B. Blockchain & Transaction Data

  • Public blockchain transaction hashes and details
  • Payment amounts, tokens used, and timestamps
  • Gateway contract addresses and configurations
  • On-chain events and logs

Note: All blockchain data is public, permanent, and accessible to anyone via blockchain explorers.

C. Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent on platform
  • Device Information: Browser type, device type, operating system, IP address
  • Analytics: Aggregated usage statistics to improve our services
  • Cookies & Local Storage: See our Cookie Policy for details

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our payment gateway services
  • Display blockchain transaction data and gateway configurations
  • Authenticate users and verify wallet ownership
  • Process and facilitate payment transactions
  • Improve our services and develop new features
  • Provide customer support and respond to inquiries
  • Monitor and analyze usage patterns and trends
  • Detect and prevent fraud, abuse, and security issues
  • Comply with legal obligations and enforce our Terms of Service

4. Public Blockchain Data

Important information about blockchain data:

  • All transactions are permanently recorded on public blockchains
  • Anyone can view transaction details using blockchain explorers
  • Blockchain data cannot be deleted or modified
  • We do not control what information is public on the blockchain

5. Information Sharing

We may share your information with:

  • Service Providers: Third-party services that help us operate our platform (wallet providers, analytics, hosting)
  • Blockchain Networks: Transaction data is broadcast to blockchain nodes
  • Legal Requirements: When required by law, court order, or government request
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement reasonable security measures to protect your information:

  • HTTPS encryption for all data transmission
  • Secure storage of database information
  • Access controls and authentication requirements
  • Regular security audits and updates

However, no method of transmission over the Internet is 100% secure. You are responsible for securing your wallet and private keys.

7. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication and session management
  • Remembering your preferences and settings
  • Analytics and performance monitoring
  • Security and fraud prevention

For more details, see our Cookie Policy.

8. Your Rights and Choices

You have the right to:

  • Access the personal information we have about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data (excluding blockchain data)
  • Opt out of certain data collection (though this may limit functionality)
  • Disable cookies in your browser settings
  • Disconnect your wallet at any time

9. Data Retention

  • Off-chain data: Retained as long as necessary to provide services or as required by law
  • Blockchain data: Permanent and immutable - cannot be deleted
  • Analytics data: Aggregated and anonymized, retained indefinitely

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

11. Children's Privacy

x402x is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of sale of personal information
  • Right to deletion of personal information
  • Right to non-discrimination for exercising CCPA rights

13. European Privacy Rights (GDPR)

European users have additional rights under GDPR:

  • Right to access and data portability
  • Right to rectification and erasure
  • Right to restrict processing
  • Right to object to processing
  • Right to lodge a complaint with supervisory authority

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform. Your continued use after changes constitutes acceptance.

15. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, please contact us via GitHub Issues.