OwnPay Privacy Policy

1. Introduction

OwnPay (“OwnPay,” “we,” “our,” or “us”) provides payment infrastructure and related technology designed to support merchants, developers, businesses, and autonomous AI agents.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you access our websites, applications, APIs, developer tools, payment interfaces, and related services (collectively, the “Services”).

By using the Services, you acknowledge that you have read this Privacy Policy. Where consent is legally required, we will request it separately.

2. Information We May Collect

Depending on how you use OwnPay, we may collect the following categories of information:

2.1 Account and Business Information

• Name, email address, and account credentials.
• Business name, business type, registration information, and contact details.
• Account preferences, verification status, and support communications.
• Information submitted during merchant onboarding or KYB verification.

2.2 Identity and Compliance Information

Where required for onboarding, fraud prevention, regulatory compliance, or provider requirements, you or an authorized verification provider may supply identity documents, business ownership information, beneficial ownership information, and other verification records. Sensitive identity documents are only collected through designated, secure verification channels.

2.3 Wallet and Transaction Information

Depending on the Services used, we may process:

• Public blockchain wallet addresses.
• Transaction hashes, network identifiers, token types (Native USDC), and transaction amounts.
• Payment intent identifiers, payment status, timestamps, and settlement records.
• Merchant invoices, payment links, and transaction metadata.
• Smart-account, agent-session, and transaction-policy information.

2.4 Technical and Usage Information

We may collect IP address, browser and device information, log data, API request metadata, security events, diagnostic information, and usage activity, subject to applicable law and our technical configuration.

2.5 Information from Service Providers

We may receive relevant information from identity verification providers, payment infrastructure providers, blockchain networks, fraud prevention services, and other partners involved in delivering requested Services.

3. How We Use Information

We may use information to:

• Create and manage accounts.
• Authenticate users and authorize API requests.
• Generate and track payment intents.
• Verify transaction status and coordinate settlement.
• Deliver receipts, webhooks, notifications, and support.
• Perform identity verification and business onboarding.
• Detect fraud, abuse, unauthorized activity, and policy violations.
• Enforce agent spending limits and transaction policies where supported.
• Maintain service reliability, debug errors, and improve security.
• Meet applicable legal obligations and respond to lawful requests.
• Communicate material changes to the Services or this Policy.

We will not use personal information for purposes incompatible with the original purpose without an appropriate legal basis or required notice and consent.

4. Legal Bases for Processing

Where applicable data protection law requires a legal basis, we may rely on contractual necessity, compliance with legal obligations, legitimate interests, consent, or another lawful basis available under applicable law.

Where processing relies on consent, you may withdraw that consent subject to legal and technical limitations.

5. How Information Is Shared

We may disclose relevant information to:

• Infrastructure, hosting, database, and security providers.
• Payment, on/off-ramp, and settlement providers.
• Identity verification, sanctions screening, and fraud prevention providers.
• Blockchain networks and transaction-monitoring services.
• Professional advisers, auditors, insurers, and legal representatives.
• Regulators, law enforcement, or other authorities when legally required.
• Successors in a merger, acquisition, or business restructuring, subject to applicable law.

6. Blockchain Transparency

Blockchain transactions are publicly accessible and immutable. When you submit a transaction, your wallet address and transaction details are visible to anyone inspecting the relevant network (such as Base L2).

OwnPay cannot delete or alter information on a decentralized blockchain that we do not control. Users and developers should avoid including unnecessary personal information in blockchain transactions or public metadata.

7. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including account operation, transaction reconciliation, security, dispute handling, recordkeeping, and legal compliance.

Retention periods depend on the type of information, applicable legal requirements, contractual obligations, and security needs. We delete or anonymize information when appropriate, subject to lawful retention obligations.

8. Security Safeguards

We use reasonable technical and organizational safeguards appropriate to the nature of the information and the risks involved. Depending on the Service, these may include access controls, authentication, encryption, logging, and security monitoring.

No internet-based service, database, wallet system, or transmission method can be guaranteed completely secure.

For security reporting or responsible disclosure, please contact: security@ownpay.tech.

9. International Data Transfers

OwnPay and its service providers may process information in countries other than your country of residence. Where required, we implement appropriate safeguards for international transfers under applicable law.

10. Your Privacy Rights

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information; object to or restrict certain processing; withdraw consent; or submit a complaint to a relevant supervisory authority.

To submit a request, contact legal@ownpay.tech. We may verify your identity before responding. These rights may be limited where information must be retained for legal, fraud prevention, or transaction-record purposes.

11. Cookies and Similar Technologies

Our websites use essential cookies and session storage to support authentication, security, session management, and dashboard functionality. We do not deploy third-party advertising tracking cookies or behavioral profile brokers.

You can manage cookies through your browser settings.

12. Children's Privacy

The Services are not intended for individuals below the minimum legal age permitted to use financial or technology services in their jurisdiction. We do not knowingly collect children's personal information.

13. Third-Party Services

Our Services may link to or integrate with third-party wallets, payment providers, and blockchain networks. Their privacy practices are governed by their own policies. We encourage users to review those policies before transacting.

14. Changes to This Policy

We may update this Privacy Policy as our Services, technology, or legal obligations evolve. We will update the “Last Updated” date and provide additional notice where required by law.

15. Contact Us & Communications

For legal requests, privacy inquiries, data rights compliance, or security notifications, contact our official communication channels: