PepPay Privacy Policy

Last Updated: November 26, 2025
Contact: admin@peppay.app

PepPay (“we,” “us,” or “our”) provides a non-custodial payment facilitation platform that helps customers seamlessly initiate fiat-to-crypto payments through regulated third-party onramp providers. We do not store or process bank credentials, financial account access tokens, or customer cryptocurrency.

This Privacy Policy explains what information we collect, how we use it, how we keep it secure, and your rights as a user of PepPay.

1. Overview

PepPay is a software platform that allows users to enter payment details (such as a vendor wallet address and the amount owed) and complete a crypto purchase using a third-party onramp. Sensitive financial information is handled exclusively by those regulated partners, not by PepPay.

We practice strict data minimization and collect only what is required to operate the service.

2. Information We Collect

2.1 Information You Provide Directly

When using PepPay, you may provide:

Vendor wallet address
Payment amount
Basic transaction metadata
Optional contact information if you reach out to support

We do not collect or store:

Bank account numbers
Bank logins
Financial institution credentials
Transaction history
Government-issued IDs
Social Security numbers
Crypto private keys or seed phrases

2.2 Information Collected Automatically

When you use PepPay, we automatically receive limited technical information, including:

IP address
Browser type
Device type
Operating system
Pages viewed and referring URLs
Error logs

This data helps us maintain platform reliability, detect abuse, and improve performance.

2.3 Information From Third-Party Onramp Providers

PepPay integrates with regulated third-party onramp providers solely to enable users to link a funding source and complete a crypto purchase.

PepPay does not receive or store:

Bank login credentials
Account numbers
Account balances
Transaction-level financial data

Sensitive financial data flows directly from the user to the onramp provider, not through PepPay’s servers.

These providers may share limited metadata with us such as:

Whether account verification succeeded
The status of a payment or funding event
Non-sensitive session identifiers
Error or failure information

This data is used only to complete your payment flow.

3. How We Use Your Information

PepPay uses the information we collect for:

Routing payment instructions to third-party onramps
Displaying transaction status
Preventing fraud and abuse
Analytics and performance monitoring
Customer support and operational troubleshooting
Compliance with applicable laws

We do not use your data for:

Advertising
Selling or renting personal information
Financial profiling
Marketing personalization

4. How We Share Your Information

PepPay may share data only with:

4.1 Third-Party Onramp Providers

To complete your payment request. Only necessary routing information is shared.

4.2 Service Providers

Including:

Vercel (hosting platform)
Logging/monitoring tools
Error tracking tools
Cloud infrastructure and security services

These providers are contractually required to protect your information.

4.3 Legal Requirements

We may disclose information if required by:

Law enforcement
Court orders
Applicable regulations

We never voluntarily disclose customer data beyond what is legally required.

5. Data Security

PepPay uses strong security controls to protect user information, including:

HTTPS/TLS encryption in transit
Encryption-at-rest for all stored data
Strict access control to production systems
Managed secrets storage
Firewalls and network isolation
Logging and anomaly detection

Hosting: PepPay runs on Vercel, which provides enterprise-grade physical and infrastructure security.

6. Data Retention

PepPay retains only the minimal operational data required for:

Transaction flow integrity
Troubleshooting
Compliance with legal obligations

We delete or anonymize data when it is no longer needed.
We do not store sensitive financial or personal information.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access personal data we hold
Request deletion of your data
Request correction of inaccurate data
Opt out of certain forms of processing

To exercise these rights, contact us at: admin@peppay.app

We may ask you to verify your request to prevent unauthorized access.

8. Children’s Privacy

PepPay is not intended for individuals under the age of 18.
We do not knowingly collect personal information from minors.

9. International Data Transfers

PepPay primarily processes data in the United States.
By using the service, you consent to the transfer of data to the U.S. and to service providers operating globally.

All transfers comply with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time.
If material changes occur, we will update the “Last Updated” date and post the revised version on our website.

11. Contact Us

If you have questions about this Privacy Policy or how PepPay handles data, please contact us at:

admin@peppay.app
PepPay