Privacy Policy
Your privacy is important to us. This Privacy Policy explains how PayFlow ("we", "us", or "the Bot") collects, uses, processes, and protects your information when you invite our bot to your Discord guild, complete payments, or use our website.
1. Information We Collect
To operate our commission-free checkout system, we process the minimum necessary data to verify transactions:
- Discord Platform IDs: We save Discord User IDs (buyer/seller) and Server/Guild IDs to tie checkouts to the correct purchase.
- Seller Configurations: Contact emails, business names, currency settings, and API authentication credentials.
- Transaction History: Item descriptions, purchase prices, transaction IDs, creation times, and transaction statuses.
- Payment Details: For cryptocurrency payments, we track target public wallet addresses and conversion rates. We do not store raw credit card numbers or banking secrets.
2. Security and Encryption
We implement professional hardware-level security to protect sensitive merchant data:
- All private API keys, client secrets, and access tokens connected by sellers are encrypted using industry-standard **AES-256-GCM** encryption before storage in our database.
- Communication with payment providers (Stripe, PayPal, Mollie, Razorpay, etc.) is carried out exclusively through secure HTTPS connections.
3. Third-Party Payment Partners
PayFlow acts as a bridge between Discord and public payment processors. When completing a payment, you agree to the privacy practices of the payment gateways chosen by the merchant:
- Stripe: Subject to Stripe’s Privacy Policy.
- PayPal: Subject to PayPal’s User Agreement.
- Crypto Networks: Public blockchains (Bitcoin, Ethereum, Solana, Litecoin) are transparent by design. Your target public wallet addresses and transaction hashes are publicly accessible.
4. Sharing Your Data
We do not sell, lease, or distribute your private database records to third parties. Data is only shared to resolve transactions or fulfill legal obligations (e.g., block explorer lookups for crypto verification).
5. Data Retention & Deletion
We retain transaction logs for accounting and stats verification. If you are a merchant and wish to delete your account, credentials, and settings from our database, you can do so at any time by configuring your profile settings inside your Discord server or contacting support.
6. Contact Us
If you have any questions regarding this Privacy Policy, please join our official support community on Discord: Support Server.