MaxPaya

Last Updated: October 2026

At MaxPaya (maxpaya.com), we prioritize data minimization, cryptographic security, and financial privacy. This Privacy Policy outlines what data we collect, how it is processed, and how we protect both Merchants and end-customers.

1. Information We Collect

Merchant Account Data: Email address, display name or business identifier, encrypted password hashes, and configured webhook/callback URLs.
On-Chain Transaction Data: Public blockchain deposit addresses, transaction hashes (tx_hash), token contract identifiers, memo tags, and transfer amounts.
Technical Telemetry: API request logs, IP addresses for rate-limiting and DDoS mitigation, and HTTP response codes from webhook dispatches.

2. Zero End-Payer PII Collection

MaxPaya operates as a pure cryptocurrency settlement layer. During the checkout flow, we do not collect personal identity documents, home addresses, or credit card details from your customers. Only public blockchain ledger data required to verify payment finality is recorded.

3. How We Use Your Data

To generate deterministic deposit addresses and monitor incoming blockchain transactions in real time.
To authenticate REST API calls and sign outgoing HMAC-SHA256 webhooks.
To calculate accurate financial analytics, ledger balances, and automated payout settlements.
To detect unauthorized access attempts, replay attacks, and anomalous API traffic.

4. Data Security & Encryption

All communication between Merchant servers and maxpaya.com is enforced over TLS 1.3 encryption. Sensitive wallet keys and signing credentials are isolated within encrypted server environments with strict atomic database locking.

5. Cookies & Session Management

MaxPaya uses strictly necessary cryptographic session cookies and CSRF tokens to authenticate Merchants inside the web dashboard (/dashboard/). We do not sell user data or embed invasive third-party advertising trackers.

6. Data Retention & Deletion