Privacy Policy

1. Overview

This policy explains what data LuvoPay collects, why we collect it, and the choices you have. LuvoPay is a non-custodial USDT payment gateway — we never hold your funds and we collect the minimum data needed to run the Service.

2. Information we collect

• Account data: email address and hashed password (or Google OAuth identifier).
• Merchant data: website URL, receiving BEP20 wallet address, verification tokens, and site credentials you generate.
• Transaction metadata: transaction IDs (TXIDs), amounts, timestamps, and verification status. This data is already public on the BNB Smart Chain.
• Technical data: basic logs, IP address, and device/browser info for security and abuse prevention.
• Identity verification: submitted identity documents and selfie frames for review, and keyed identity fingerprints to detect repeated free-trial claims. Review media is private and restricted to authorized administrators.

We do not collect your private keys, we do not custody your funds, and we do not ask your customers for personal information through the payment widget.

3. How we use your data

• Provide, verify, and secure the Service.
• Verify on-chain payments against your registered wallet.
• Send transactional emails (email verification, password reset, billing notices).
• Detect fraud, abuse, and violations of our Terms.
• Comply with legal obligations.

4. Legal bases

Where GDPR or similar laws apply, we process data based on contract performance (running the Service), legitimate interests (security, product improvement), consent (where required), and legal obligations.

5. Sharing

We share data only with the service providers required to run LuvoPay:

• Cloud hosting and database infrastructure (for storing your account and website data).
• Public blockchain RPC providers and explorers (to read on-chain transactions).
• Email delivery providers (for transactional emails).
• Authentication providers you choose (e.g. Google).
• AI review providers (to review identity documents, selfie actions, and face consistency).

We do not sell your personal data. We may disclose data if required by law or to protect our rights.

6. On-chain data is public

Wallet addresses and transactions on the BNB Smart Chain are public and permanent. Anyone can inspect them. Consider this before publishing your receiving wallet.

7. Data retention

We keep account and merchant data while your account is active. If you delete your account, we remove your personal data within a reasonable period, except where retention is required for security, accounting, or legal reasons.

Free-trial identity fingerprints are stored separately from accounts and retained after account deletion to prevent repeat claims. Historical financial records are archived rather than silently deleted. Contact us about identity-media retention or deletion. Duplicate detection uses in-house document extraction, not a provider-backed identity registry, and may require support review.

8. Your rights

Subject to applicable law, you can request access, correction, deletion, export, or restriction of your personal data. You can also withdraw consent where processing is based on consent. Contact us to exercise these rights.

9. Security

We use industry-standard measures including encryption in transit, row-level security on our database, hashed passwords, and least-privilege access controls. No system is 100% secure — protect your wallet's private keys and account credentials.

10. Cookies

We use only the cookies and local storage needed to keep you signed in and to remember your theme preference. We do not use advertising or cross-site tracking cookies.

11. Children

LuvoPay is not directed to anyone under 18. We do not knowingly collect data from children.

12. Changes

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

13. Contact

Privacy questions? Reach us through the support channel listed on our website.