Privacy Policy

ArcenPay is the controller of personal data described in this Policy. For privacy questions, access requests, or deletion requests, email support@arcenpay.com. For general business inquiries, email hello@arcenpay.com.

If you are an end user of one of our customers — for example, a subscriber billed through a product built on ArcenPay — that customer is the controller of your data and we process it on their behalf as their service provider. Please contact that customer first; we will assist them with requests they receive.

• Account and contact data. Names, email addresses, organization and workspace names, roles, invitations, and account identifiers.
• Authentication data. Session tokens and one-time login codes (stored hashed), and identifiers from connected authentication or wallet providers.
• Wallet and on-chain data. Public wallet addresses on the networks we support (EVM chains, Stellar, and Solana), transaction hashes and signatures, token and network details, contract interactions, and other public blockchain records. We do not collect private keys or seed phrases.
• Billing, payment, and invoice data. Catalog plans, add-ons, credits, subscriptions and entitlements, usage and metering records, invoices and credit notes, payment links, checkout sessions, payment amounts, payer and recipient wallet addresses, refunds, and related ledger entries.
• Tax and business data. Legal or business name, billing address, country, and tax identifiers such as a tax ID or GSTIN where you provide them for invoicing.
• Customer end-user data. When our customers bill their own users, we process the data they submit to us — such as wallet addresses, email addresses, plan assignments, and usage records — on the customer's instructions.
• Technical, usage, and security data. IP address, browser, device and operating-system information, pages and features used, entitlement checks and events, audit logs, and diagnostic data.
• Cookies and browser storage. Cookie and local-storage preferences used to operate and measure the Service.
• Developer, plugin, and agent data. API keys (stored hashed), webhook endpoints and signing secrets, plugin and agent configuration and budgets, dispatch requests, and proof results you submit.
• Information you provide. Data submitted through forms, demo requests, the waitlist, support requests, integrations, APIs, or SDKs.

We use personal data to operate, secure, and improve the Service; create and administer accounts and workspaces; provide subscriptions, entitlements, and usage metering; process, reconcile, and refund payments; generate, deliver, and store invoices and calculate applicable tax; provide agent and machine-payment features; respond to support requests; communicate service and product updates; prevent fraud and abuse; comply with law; and enforce our agreements.

Where required by law, we rely on the legal bases applicable to the processing, including performance of a contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where requested.

We and our service providers use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand aggregate usage. For example, our dashboard and documentation use Google Analytics, and our marketing website uses Vercel Analytics. We configure these tools to avoid sending personal data or wallet addresses, and we do not use advertising or cross-context behavioural tracking.

You can block or clear cookies and local storage through your browser settings. Blocking certain technologies may affect Service functionality.

The ArcenPay plugin for AI assistants such as ChatGPT and Codex, and our Model Context Protocol (MCP) connections, provide a read-only link that lets an authorized user ask about their ArcenPay billing account inside an AI assistant. They never change billing state, start subscriptions, cancel plans, or move funds.

They can access workspace and account identifiers (including team ID, active environment, credential type, and permissions); customer company records (including name, email address, wallet address, and active plan); catalog plans and add-ons (including names, prices, intervals, tokens, and chains); subscription state; entitlement checks; invoices and generated invoice PDFs; payment links and their specifications; agent payment-mandate and escrow settlement status; and supported blockchains and contract addresses.

We do not collect through these connections payment-card data, protected health information, government identifiers, or authentication secrets such as passwords, API keys, or one-time codes.

Plugin data is used solely to answer the authorized user's request inside the assistant. Recipients are the AI assistant provider (such as OpenAI's ChatGPT or Codex) and ArcenPay's backend. We do not sell this data or use it for advertising or behavioural profiling.

The connection does not retain the data it returns. We retain brief operational logs, redacted of personal data where practicable, and retain account data according to the retention practices below. You may disconnect the connection in the assistant, revoke access in your ArcenPay workspace, or request access or deletion at support@arcenpay.com.

We do not sell personal data or share it for cross-context behavioural advertising. We may share personal data with your organization's authorized administrators; when you direct us to share it; with an AI assistant provider when you connect a plugin or MCP connection; and when required to comply with law or protect the Service and its users.

We also use service providers that help us run the Service, including hosting and cloud infrastructure (such as Vercel and Railway), databases and caching (such as PostgreSQL and Redis), transactional email delivery (such as Resend), file storage for invoices (such as Cloudflare R2), wallet connection and account-abstraction providers (such as WalletConnect and ZeroDev), security and abuse protection (such as Arcjet), analytics (such as Google Analytics and Vercel Analytics), blockchain data and RPC providers (such as The Graph and node providers), proof and privacy-technology providers (such as Reclaim Protocol), scheduling (such as Cal.com), and form and communication tools (such as Google Sheets and Airtable).

Public blockchain records are inherently available to the public and cannot be altered or deleted by ArcenPay. Third-party sites, wallets, networks, and services are governed by their own privacy terms.

We retain data for as long as reasonably necessary to provide the Service, maintain security and records, resolve disputes, enforce our agreements, and meet legal obligations. We delete or anonymize data when it is no longer needed, subject to backups and legal retention requirements. Public blockchain data cannot be deleted by us.

When we process data on behalf of a customer, we retain it under our agreement with them and delete or return it as instructed.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of, or receive a portable copy of your personal data, and to withdraw consent where processing relies on consent. To make a request, email support@arcenpay.com. We may need to verify your identity and may retain information where permitted or required by law.

You can manage browser cookies and local storage through your browser settings. Blocking certain technologies may affect Service functionality.

We use reasonable technical and organizational safeguards designed to protect personal data, including access controls, encryption in transit, and security monitoring. No method of transmission or storage is completely secure.

The Service may be used and processed across borders. By using it, you understand that your information may be processed in countries with data-protection laws that differ from those where you live.

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact support@arcenpay.com.

We may update this Policy as our practices or the Service change. We will post the updated version with a revised "Last updated" date and provide additional notice for material changes where required.

Questions or requests: support@arcenpay.com. General inquiries: hello@arcenpay.com.