1. Overview & Non-Custodial Commitment

JamsrPay ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. As a non-custodial crypto payment gateway infrastructure, JamsrPay does not hold private keys, manage user wallet reserves, or process fiat banking deposits directly.

This Privacy Policy explains how we collect, process, and safeguard information when you use our website, hosted checkout pages, payment links, APIs, SDKs, and merchant dashboard services (collectively, the "Services").

2. Information We Collect

We collect limited categories of information necessary to provide and secure our Services:

• On-Chain Transaction Data: Public wallet addresses, transaction hashes, block numbers, token types (USDT, USDC, BTC, ETH, SOL), and sale amounts. Please note that blockchain data is inherently public and permanent.
• Merchant Account Information: Email address, merchant name, API key metadata, and notification channel preferences.
• Technical & Usage Log Data: IP addresses, browser agent headers, system request timestamps, and API rate-limit identifiers used to prevent DDoS attacks and fraud.
• Customer Checkout Inputs: If configured by a merchant on hosted checkout or payment links, optional customer inputs (such as email or shipping address) are collected on behalf of the merchant.

3. How We Use Your Information

We use the collected information for the following specific purposes:

• To route, index, and verify on-chain payment status for merchant webhooks and dashboards.
• To calculate flat 0.5% transaction fees and native JamsrPay token fee discounts.
• To detect, prevent, and mitigate unauthorized access, API abuse, and cyber security threats.
• To comply with applicable legal obligations, anti-money laundering (AML) protocols, and regulatory reporting.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share information with trusted infrastructure providers (such as cloud hosting providers and blockchain RPC indexers) strictly to execute the Services.

5. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have rights to access, rectify, or request deletion of personal information held in our off-chain systems. Note that data recorded directly on public blockchains cannot be modified or erased due to immutability.