x402x
Privacy Policy
Effective as of 12/4/2025
This Privacy Policy explains how x402x collects, uses, and protects your information when you use our platform. We are committed to protecting your privacy while providing transparent payment gateway services.
1. Non-Custodial Design
x402x operates as a non-custodial platform:
- We do not have custody of your funds or private keys
- Wallet connections are handled through Privy authentication
- You maintain complete control over your assets at all times
- Transactions are executed directly on blockchain networks
2. Information We Collect
A. Information You Provide Directly
- Wallet Addresses: When you connect your wallet to use our services
- Authentication Data: Wallet signatures for authentication
- Gateway Metadata: Information you provide when creating payment gateways (name, description, pricing, target URLs)
- Token Configurations: Supported tokens and pricing information
- Contact Information: If you reach out for support (email, GitHub username)
B. Blockchain & Transaction Data
- Public blockchain transaction hashes and details
- Payment amounts, tokens used, and timestamps
- Gateway contract addresses and configurations
- On-chain events and logs
Note: All blockchain data is public, permanent, and accessible to anyone via blockchain explorers.
C. Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on platform
- Device Information: Browser type, device type, operating system, IP address
- Analytics: Aggregated usage statistics to improve our services
- Cookies & Local Storage: See our Cookie Policy for details
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain our payment gateway services
- Display blockchain transaction data and gateway configurations
- Authenticate users and verify wallet ownership
- Process and facilitate payment transactions
- Improve our services and develop new features
- Provide customer support and respond to inquiries
- Monitor and analyze usage patterns and trends
- Detect and prevent fraud, abuse, and security issues
- Comply with legal obligations and enforce our Terms of Service
4. Public Blockchain Data
Important information about blockchain data:
- All transactions are permanently recorded on public blockchains
- Anyone can view transaction details using blockchain explorers
- Blockchain data cannot be deleted or modified
- We do not control what information is public on the blockchain
5. Information Sharing
We may share your information with:
- Service Providers: Third-party services that help us operate our platform (wallet providers, analytics, hosting)
- Blockchain Networks: Transaction data is broadcast to blockchain nodes
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
6. Data Security
We implement reasonable security measures to protect your information:
- HTTPS encryption for all data transmission
- Secure storage of database information
- Access controls and authentication requirements
- Regular security audits and updates
However, no method of transmission over the Internet is 100% secure. You are responsible for securing your wallet and private keys.
7. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication and session management
- Remembering your preferences and settings
- Analytics and performance monitoring
- Security and fraud prevention
For more details, see our Cookie Policy.
8. Your Rights and Choices
You have the right to:
- Access the personal information we have about you
- Request correction of inaccurate information
- Request deletion of your account and associated data (excluding blockchain data)
- Opt out of certain data collection (though this may limit functionality)
- Disable cookies in your browser settings
- Disconnect your wallet at any time
9. Data Retention
- Off-chain data: Retained as long as necessary to provide services or as required by law
- Blockchain data: Permanent and immutable - cannot be deleted
- Analytics data: Aggregated and anonymized, retained indefinitely
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.
11. Children's Privacy
x402x is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.
12. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of sale of personal information
- Right to deletion of personal information
- Right to non-discrimination for exercising CCPA rights
13. European Privacy Rights (GDPR)
European users have additional rights under GDPR:
- Right to access and data portability
- Right to rectification and erasure
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with supervisory authority
14. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform. Your continued use after changes constitutes acceptance.
15. Contact Us
For questions about this Privacy Policy or to exercise your privacy rights, please contact us via GitHub Issues.