Home Platform Market Pricing About Us Step by Step Docs Blog Affiliate Connect
Portal Access

Privacy Policy

Official Corporate Compliance & Legal Documentation

Last updated: March 2026

1. Introduction

This Privacy Policy explains how PayCow collects, uses, and protects Merchant and Customer information across our non-custodial payment infrastructure.

2. Legal Definitions & Entity Roles

To ensure total regulatory and operational clarity regarding data processing responsibilities, the following legal definitions apply:

  • PayCow ("We", "Us", "Our"): Refers to PayCow Distributed Ledger Technologies. PayCow operates strictly as a non-custodial software infrastructure and blockchain transaction monitoring gateway. PayCow does not hold customer private keys, store balances, or execute asset sweeps. PayCow acts as a Data Controller for Merchant registration data and a Data Processor on behalf of Merchants regarding Customer payment telemetry.
  • Merchant ("Operator", "Business", "You"): Any registered enterprise, digital platform, online store, or commercial operator using PayCow payment infrastructure to monitor cryptocurrency payments from Customers.
  • Customer ("Payer", "End-User"): An individual or entity executing cryptocurrency payments directly to a Merchant's configured destination wallet address on the blockchain.
  • Affiliate Partner ("Affiliate", "Referrer"): An individual or corporate entity enrolled in the PayCow Affiliate Program referring Merchants to the platform.
  • Main Wallet Address: A blockchain-native TRC-20 or ERC-20 wallet specified by the Merchant to receive direct customer payments upon on-chain block confirmation.

3. Information We Collect

Depending on your entity classification and interaction with our platform, we collect the following categories of data:

  • Merchant Profile Data: Contact email address, account preferences, API credentials, and registered Main Wallet destination address.
  • Network Security: Your IP address is sent to FFraud to check fraud score, VPN, proxy, Tor, relay, hosting, abuse history, threat intelligence, and network-range risk before access is granted. PayCow rejects fraud scores of 25 or higher and high-risk network ranges, as well as anonymized, hosted, or abuse-linked connections. Network verdicts are cached on our server for up to five minutes. Password-reset and registration OTP attempts are recorded with their purpose and source IP for abuse prevention. A secure, HTTP-only cookie records successful browser verification for the same period.
  • Customer Transaction Telemetry: Public blockchain transaction hashes, sending wallet addresses, token contract addresses, and timestamp logs for transaction verification.
  • Technical & System Telemetry: IP addresses and authenticated merchant dashboard API activity, including request metadata, response status, processing time, and operator sign-in details such as operating system, browser, device category, and browser-reported screen and viewport dimensions. Passwords, tokens, and similar secret fields are masked; file contents and response bodies are not retained.

4. Purpose & Legal Basis of Data Processing

We process Merchant and Customer data under strict legal grounds to:

  • Provide non-custodial transaction monitoring and real-time payment status tracking.
  • Verify blockchain block confirmation depth and invoice completion statuses.
  • Detect and prevent malicious network attacks, API abuse, and fraudulent activity.
  • Comply with applicable legal, regulatory, and audit obligations.

5. Data Sharing & Disclosures

We do not sell Merchant or Customer data. We share technical telemetry strictly when necessary with:

  • Blockchain RPC node infrastructure and cloud network hosting providers.
  • Technical security auditors and legal authorities when legally mandated.
  • Essential email communication delivery services (for OTP security logins).

6. Data Retention Standards

Merchant profile records and transaction hash logs are retained for active account management and technical dispute verification. Operator sign-in and authenticated dashboard activity records, including IP and device details, are automatically deleted after 365 days. When an operator account is suspended, its recorded IP addresses may be restricted from all website pages, APIs, account registration, and digital marketplace purchases for 90 days, or up to 900 days for accounts explicitly revoked for abuse; the IP block record is automatically deleted when that period ends. Password reset requests are rate limited by IP, with temporary counters expiring at the end of their rate limit windows. Temporary checkout session telemetry is purged according to automated data minimization schedules.

7. Data Security Architecture

We implement enterprise-grade encryption, cryptographic password hashing, tokenized API authentication, database access controls, and strict rate-limiting to protect Merchant telemetry from unauthorized access.

8. Data Subject Rights

Merchants and users may request access, correction, or export of their account information by contacting our data protection officer via the Support Hub.

9. Policy Amendments

PayCow reserves the right to amend this Privacy Policy at any time. Continued use of our infrastructure constitutes acceptance of updated privacy terms.