Back to home

Privacy Policy

Last updated: February 23, 2026

1. Introduction

PebblePay ("we", "our", or "us") is committed to protecting the privacy of our Sellers and Buyers. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our Platform. As a Merchant of Record, we process transaction data on behalf of Sellers and are the data controller for buyer payment information.

2. Information We Collect

From Sellers:

  • Account information: email address, Telegram handle (optional).
  • Application data: monthly revenue, store URL, product descriptions, payout cryptocurrency wallet address, and geographic sales distribution.
  • Transaction data: sales history, payout records, and fee calculations.
  • Support data: ticket content and communications.

From Buyers:

  • Payment information: card details (processed securely via PCI-compliant payment processors; we do not store full card numbers).
  • Transaction data: purchase history, product details, amounts, and billing country.
  • Device and usage data: IP address, browser type, and referring pages.

Automatically Collected:

  • Log data: IP addresses, browser information, pages visited, timestamps.
  • Cookies: essential session cookies for authentication and preferences. We do not use third-party advertising cookies.

3. How We Use Your Information

  • To process transactions and payouts as Merchant of Record.
  • To collect and remit applicable taxes (sales tax, VAT, GST).
  • To verify Seller identity and eligibility during the application process.
  • To detect and prevent fraud, chargebacks, and unauthorized transactions.
  • To provide customer support and manage disputes.
  • To comply with legal obligations (e.g., financial regulations, tax reporting).
  • To send transactional notifications (payout confirmations, status updates).
  • To improve our Platform and services.

4. Data Sharing

We do not sell personal data. We share data only in the following circumstances:

  • Payment processors: to process card payments and crypto payouts securely.
  • Tax authorities: to comply with sales tax, VAT, and GST reporting obligations.
  • Fraud prevention services: to detect and prevent fraudulent activity.
  • Legal requirements: when compelled by law, regulation, or legal process.
  • Sellers: buyers receive a receipt showing the product name and PebblePay as the Merchant of Record. Sellers can view aggregated, non-identifying analytics about their sales.

5. Data Retention

We retain personal data for as long as your account is active, plus a reasonable period thereafter to comply with legal and financial reporting obligations (typically 7 years for transaction records). Support ticket data is retained for 3 years after resolution. You may request deletion of your account and personal data at any time, subject to legal retention requirements.

6. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.3) and at rest, secure password hashing, role-based access controls, and regular security audits. Payment card data is processed through PCI DSS Level 1 compliant payment processors and is never stored on our servers.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (right to erasure).
  • Object to or restrict processing of your data.
  • Data portability (receive your data in a structured format).
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, contact our support team.

8. International Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place for international transfers, including standard contractual clauses where required by GDPR.

9. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising or tracking cookies. No cookie consent banner is required as we only use essential cookies necessary for the Platform to function.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or Platform notification. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related inquiries, contact our support team.