Privacy Policy

1. Information We Collect

We collect the minimum data required to operate, secure, and improve the Services.

Account and Merchant Data
- Email address
- Account credentials (stored securely)
- Merchant profile data such as name, wallet address, webhook URL, and API keys

Payment and Session Data
- Payment and session identifiers
- Amount, currency, status, timers, and timestamps
- Transaction identifiers (txid) and wallet addresses related to payments

Technical and Usage Data
- IP address
- Browser, device, network, and request metadata
- Access times, activity logs, security events, and abuse-prevention data

Cookies and Local Storage
- We use an HttpOnly cookie to store refresh tokens for authentication.
- We use local storage for cross-tab sync of non-sensitive client state, for payment-session and verification flow recovery, and may store a referral code in your browser for up to 14 days to attribute registration through a referral link.
- We do not use analytics or advertising cookies at this time.

2. How We Use Information

We use collected data to:
- Provide, operate, and maintain the Services
- Authenticate users, secure accounts, and prevent abuse
- Process payments, payment sessions, referral activity, and payout requests
- Respond to support requests and business inquiries
- Comply with legal obligations, investigate suspicious activity, and improve security

3. Data Sharing

We do not sell personal data. We may share data with providers that operate the Services, including hosting, CDN, monitoring, security and bot protection, wallet connectivity, blockchain infrastructure, quote providers, email delivery, Telegram, and chat support. We may also disclose data when required to protect the Services, users, merchants, customers, or third parties.

We use external providers only where they help operate, protect, or support the Services. The relevant provider may process the technical or account data needed for its function.

4. Data Retention

We retain account, payment, invoice, transaction, referral, service-balance, webhook, support, security, and audit data indefinitely while it is needed to operate, secure, review, or maintain the Services. We may also retain technical logs and records indefinitely.

5. Security

We use administrative, technical, and organizational measures designed to protect personal data from unauthorized access, loss, misuse, and disclosure. No system is perfectly secure, but we work to safeguard data to an appropriate standard for the Services.

6. Your Rights

You may request access to or correction of your data through the Contacts.

CryptoNow does not currently provide account deletion. We may decline, limit, or delay a deletion request where keeping the data is needed for account integrity, payment and financial records, referral or service balances, security, fraud prevention, technical integrity, disputes, or operational continuity.

7. Referral Program and Referral Payout Requests

If you submit a referral payout request, we store the request amount, the payout wallet address you provide, the processing status of the request, transaction identifiers when available, and related timestamps.

We also store technical metadata related to referral payout requests, such as IP address, user-agent, device or request metadata, and account identifiers, to prevent abuse, investigate disputes, support manual review, and maintain audit records.

If you joined through a referral link, the relevant referrer may see limited referral-program data such as your displayed name, masked email, referral status, join date, payment counts, and referral rewards generated by eligible payments.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be posted on the Site with an updated effective date.

9. Contact

If you have questions about this Privacy Policy, contact us via the Contacts

You may also contact us by email at [email protected] for support matters and [email protected] for business matters.