privacy policy

1. what we collect

we do not collect personal data unless you give it to us directly — for example, when you write to us via email or fill in a contact form.

1.1 automatically collected

when you load this site, the following may be logged by our hosting layer or analytics provider:

• ip address
• browser type and version
• device type (mobile, tablet, desktop)
• referring page or search query
• pages viewed and time on page

we use this only to monitor performance, detect abuse, and improve the site.

1.2 cookies

we use a small number of cookies to:

• remember your theme preference (light or dark)
• aggregate anonymous usage statistics

we do not run advertising cookies or third-party tracking pixels.

2. how we use what we collect

we use the data above to:

• improve the marketing site and the checkout experience
• understand which pages are useful
• respond to messages you send us

we do not sell or share your personal data with anyone for their own marketing purposes.

3. third-party services

we may rely on a small number of vendors to host or analyze the site (for example a cdn, an email provider, or a privacy-respecting analytics tool). they receive only the technical data needed to do their job, and we choose vendors that minimize data retention.

if you would like a current list of the processors we use, write to [email protected].

4. self-hosted deployments

HalcoPay is sold as software that you run on your own infrastructure. once you deploy it, all data collected through your instance — including wallets, invoices, customer details, and transactions — is controlled and stored by you, not by us.

we have no access to your instance. this privacy policy describes only data collected via our marketing website. operators of self-hosted HalcoPay instances are responsible for publishing their own privacy notice to their customers.

5. your rights

depending on where you live, you may have the right to:

• access — request a copy of any personal data we hold about you
• correction — ask us to correct it if it's wrong
• deletion — ask us to delete it
• portability — receive your data in a structured, machine-readable format

email [email protected] with the subject "data request" and we will respond within 30 days.

6. security

we use standard precautions to protect what little data we do collect — encrypted transport (tls), access controls on backend systems, and reputable hosting providers. no system on the public internet is perfectly secure, and we don't claim otherwise.

7. children

HalcoPay is a business-to-business product. our website is not directed at children under 16, and we do not knowingly collect data from them.

8. changes

if we change this policy in a material way, we will update the effective date at the top of this page and, where appropriate, notify customers we already have a contractual relationship with. continued use of the site after a change means you accept the revised policy.

9. jurisdiction

we comply with applicable data protection laws where we operate, including the eu general data protection regulation (gdpr) and the california consumer privacy act (ccpa).

10. contact

questions, requests, or concerns — write to [email protected].