This policy explains how payfim.com handles personal data. The self-hosted Payfim gateway you install stores your own customers' data on your server; we never receive it.
Data we collect
- Account data: name, email, company, country and a hashed password.
- Order data: what you bought, amounts, the cryptocurrency and public transaction hash used to pay.
- License checks: your license key, the domain and software version of your gateway, and the requesting IP address.
- Support data: messages you send us.
- Security logs: sign-in times and IP addresses, used to protect your account.
Why we use it
To provide and license the Software, deliver downloads and updates, answer support requests, prevent fraud and abuse, and - only if you opt in - send product news.
Sharing
We do not sell personal data. We use an email delivery provider to send transactional emails. We may disclose data if required by law.
Cookies
We use one essential session cookie to keep you signed in and protect forms. We do not use advertising cookies.
Retention
Account and order records are kept while your account is active and as required for accounting. Security logs are kept for up to 12 months.
Your rights
You can access and update your profile in the client area, and ask us to export or delete your data by opening a ticket or contacting us.
