Privacy Policy

This Privacy Policy (the "Policy") explains what personal data the PayMeSafe service processes, why and on what basis, to whom it is transferred, how long it is kept and what rights you have.

1. Data controller

  1. The controller of your personal data (the "Operator") is the operator of the PayMeSafe service.

  2. For any questions about personal data, including to exercise your rights, write to the support address.

  3. The Policy is information for you, not an agreement: you do not need to accept it. Where processing is possible only with your consent, the Operator asks for it separately — with a box next to the action — and you are free not to give it.

  4. The Policy applies together with the Terms of Service and the Cookie Policy.

2. What data is processed and why

The Operator processes data of users of the service, people whom users invite to deals, and website visitors. Processing is automated and involves employees of the Operator: collection, recording, systematisation, storage, updating, use, transfer in the cases described in section 4, anonymisation and deletion.

  1. Account.

    • Data: email address; password — only as a hash, the password itself is not stored; name; interface language; the username assigned by the service. If you have enabled multifactor authentication — its secret key and backup codes; backup codes are stored as hashes.
    • Purpose: to create the account, let you into the service, restore access and contact you.
    • Basis: contract (the Terms of Service).

  2. Public profile.

    • Data: name, username, marks of a confirmed email, completed identity verification and completed deals, registration date.
    • Who sees it: other Users and website visitors, including without signing in. Contacts, wallets and documents are not shown in the profile.
    • Purpose: so that your partner in a deal understands whom they are dealing with.
    • Basis: contract.

  3. Deals and messages.

    • Data: your role in the deal, the details about yourself you entered in the deal, the title, terms and parameters of the deal, revisions of the terms, files, messages in the deal feed, dispute materials.
    • Who sees it: your partner in the deal and, in a dispute, the arbiter and the reviewer. Anyone with the invitation link can see a preview of the deal before signing in.
    • Purpose: carrying out deals and reviewing disputes.
    • Basis: contract.

  4. Invitations.

    • Data: the email address of the person you invite to a deal.
    • How it is used: the Operator stores the address and sends the invitation to it. The recipient can opt out of invitations; their address is then kept in the opt-out list so that no more invitations are sent to it.
    • Basis: the legitimate interest of the inviting User and the Operator in delivering the invitation to the recipient; for the opt-out list — the duty to respect the recipient's refusal.

  5. Wallet and operations.

    • Data: balances, deposit addresses, deposits, withdrawals, locked funds, releases, refunds, fees, withdrawal addresses and blockchain transaction identifiers.
    • Purpose: keeping and recording funds, carrying out operations and settling deals.
    • Basis: contract; keeping the history of operations — also legal requirements.

  6. Blockchain addresses. The addresses from which you top up your wallet and to which you withdraw funds, and the transactions on them, are visible on the network to anyone. This is a property of the blockchain: the Operator cannot hide or delete such records.

  7. Identity verification.

    • Data: a copy of a document proving your identity, the data in it, the document type, the result and date of the check.
    • Purpose: identity verification before withdrawals and AI reviews, compliance with legal requirements.
    • Basis: your separate consent to processing of the document copy, given before each upload, and legal requirements.

  8. AI review of the terms.

    • Data: the text of the deal terms and the deal details listed in the consent; the results of the check — findings and your decisions on them.
    • Purpose: checking the text of the terms at your request.
    • Basis: your separate consent to data transfer for AI review, given before each check.

  9. Acceptance of documents.

    • Data: which document and version you accepted or which consent you gave, the date and time, IP address and browser details.
    • Purpose: to confirm that you accepted the document or gave consent.
    • Basis: the Operator's legitimate interest and the legal duty to prove consent.

  10. Technical data and security.

    • Data: IP address; browser and device details — browser type and version, operating system, language, time zone, screen parameters, a technical browser fingerprint; device and session identifiers; service error logs.
    • Purpose: to recognise your device, detect sign-ins by others, limit password and code guessing, find and fix errors.
    • Basis: the legitimate interest of the Operator and Users in protecting accounts and funds.

  11. Draft without an account.

    • Data: a deal draft put together before registration, with its attached files, and technical device data. They are kept for a limited time.
    • Purpose: to keep the draft until registration and protect the service from abuse.
    • Basis: the Operator's legitimate interest.

  12. Support requests.

    • Data: your email address and the content of the correspondence.
    • Purpose: to answer your request.
    • Basis: contract and your request.

  13. Cookies. The cookies the service uses are described in the Cookie Policy.

3. Legal bases

  1. Contract — the Terms of Service: processing is needed to provide the service to you.

  2. Consent — for the document copy in identity verification and for data transfer in an AI review. Consent can be withdrawn (section 8).

  3. Law — where the law requires the Operator to keep information or pass it to government authorities.

  4. Legitimate interest — protecting accounts and funds, confirming acceptance of documents, delivering invitations, where such processing does not infringe your rights.

4. Who receives the data

  1. The Operator does not sell personal data and does not pass it on for advertising.

  2. Within the service, data is seen by: your partner in the deal — the deal data; the arbiter and the reviewer — dispute materials; any visitor — the public profile. Employees of the Operator access data to the extent needed for their work.

  3. To run the service and on the Operator's instructions, data is received by:

    • an AI model provider — currently OpenRouter, Inc. (USA): only for an AI review, only with your consent and only the data listed in the consent (section 5);
    • the email service used to send emails — the recipient's address and the text of the email;
    • the hosting provider of the servers the service runs on — the data stored on those servers;
    • blockchain network access services — addresses and transaction data, to carry out and check transfers; your name and email address are not passed to them.

  4. Government authorities receive data where the law requires it.

5. Cross-border transfer

  1. In an AI review, the data listed in the consent is transferred to an AI model provider — currently OpenRouter, Inc. (USA). OpenRouter forwards the request to the provider of the language model that performs the check.

  2. If the text of the terms contains personal data, this is a cross-border transfer of personal data. It takes place only with your consent, given before each check. Details are in the Consent to Data Transfer for AI Review.

6. Retention

  1. Data is kept while your account exists.

  2. After the account is closed, the data listed in section 7 is deleted or anonymised. The history of deals and wallet operations is kept for as long as the law requires.

  3. If you withdraw consent, processing on its basis stops, and the data obtained on its basis is deleted within the period set by law unless it has to be kept on another basis.

7. Closing the account

  1. You can close your account by writing to the support address from the account's email address. The account is closed if you have no unfinished deals, open disputes, withdrawals in progress, locked funds or wallet balance.

  2. On closure, your personal details are deleted or anonymised: name, email address, sign-in credentials and identity document copies. Closure is irreversible.

  3. The deals you took part in and everything you posted in them, as well as wallet operations, remain: the other party needs them, and they are needed for accounting. Text you wrote yourself is not changed.

8. Your rights

  1. You have the right to:

    • find out whether the Operator processes your data, what data and why;
    • get a copy of your data;
    • correct inaccurate data — the name is changed in the profile settings, the rest on request;
    • request deletion of your data or the end of its processing — except data the Operator must keep by law;
    • withdraw consent;
    • complain about the Operator's actions to the data protection authority or to a court.

  2. To exercise a right, write to the support address from the account's email address. The Operator responds within the period set by law.

  3. The list of devices signed in to the account is shown in the security settings; you can revoke a device's access there.

9. How data is protected

  1. The connection to the service is encrypted.

  2. Passwords are stored only as hashes.

  3. Identity document copies are kept in closed storage and cannot be opened by a direct link; only employees of the Operator who carry out verification have access to them.

  4. Deal files are kept in closed storage and are available to the parties to the deal and, in a dispute, to the arbiter and the reviewer.

  5. Keys to deposit addresses are stored encrypted.

  6. Signing in and money operations can be additionally protected with multifactor authentication.

10. Automated decisions

  1. The service does not make decisions with legal effect for you without human involvement. Identity verification and disputes are reviewed by employees of the Operator; findings of the AI assistant are only suggestions.

  2. The service applies only account protection measures automatically.

11. Changes to the Policy

  1. The Policy and the other documents of the service share one version; its date is shown at the beginning of the document.

  2. A new version is published on the website. When a new version is released, you accept the Terms of Service again before continuing to use the service.