Privacy

Draft · 3 September 2026 · under review

This is a working draft under legal review. It describes what the system actually does today, which is the part we can state accurately now.

Your data is held by PayNow DAO LLC, a Wyoming limited liability company, which operates PayNow.

If you are a merchant

We store:

  • your email address, which is also how you sign in;
  • the domain you linked and when it was verified;
  • the wallet address you gave us, and which network it is on;
  • the invoices you create — amount, description, and their state;
  • the payments made against them, and the double-entry records derived from them;
  • whether an operator has reviewed your domain, who reviewed it and what they said.

If you are paying an invoice

You do not have an account and we do not ask you for anything. What the system records is narrower than you might expect:

  • Your IP address, briefly, and only as a counter. The public invoice page is rate limited per IP so one visitor cannot exhaust a shared resource. It is stored as part of a counter key, not against your payment, and the rows are deleted after two hours.
  • Anonymous checkout steps — page viewed, wallet opened, signed, submitted, confirmed, abandoned — and which kind of wallet was used. These carry no IP address and no wallet address.
  • Your wallet address, if you pay. It is recovered from the signature you produce and is checked against a public sanctions oracle before we submit anything. It is also part of the payment itself, which is public on the network regardless.

What we never have

  • No private key of yours, in any form. If you create a wallet on the payment page, the key is generated in your browser and stays there. That code makes no network request at all, and a test checks that it cannot start making one.
  • No password — sign-in is a code sent to your email.
  • No card numbers and no bank details. There is nowhere to enter them.

What is public whatever we do

Payments settle on a public network. The amount, the addresses involved, and the time are visible to anyone, permanently, whether or not PayNow exists. We do not attach your name or your customer’s to that record — but the record is not ours to make private, and nobody can make it private.

Who else processes it

We keep this list short on purpose, and it is the complete one:

  • Supabase — the database and the sign-in emails. Production data is stored in the United States.
  • Vercel — hosting. Its request logs see IP addresses, as any web host does.
  • Alchemy — the connection we use to read the network and submit payments. It sees the addresses we ask about.
  • Resend — email to our own operators when something needs attention. These notices deliberately never contain a payer address or a signature.
  • Google Fonts — one typeface is still fetched from Google on page load, including on the payment page, so Google sees the request. We self-host our other faces and intend to self-host this one too; until then, saying so is better than not.

We do not run advertising or third-party analytics, and we sell nothing.

How long we keep it — and what cannot be deleted

Rate-limit counters are deleted after two hours. Resolved domain names are cached briefly and refreshed.

The rest is more honest than most policies will be with you. Financial records here are append-only by design. A posted ledger entry is never edited or deleted; a mistake is corrected by adding an opposing entry, so the original stays. The same is true of operator decisions about a domain. This is deliberate — a payment record that can be quietly rewritten is not a record — and it means a request to erase your data cannot reach those rows without destroying the integrity of the ledger they belong to.

We can close your account, stop processing for you, and remove what is not part of that record. We will tell you plainly which is which rather than promising deletion we cannot perform.

Asking us about your data

Write to support@paynow.com and we will tell you what we hold about you and correct anything wrong. Depending on where you live you may have further rights; the review this page is under includes exactly which regimes apply and what we must offer under each, and we would rather name them once correctly than list statutes we have not checked.

Changes

The date at the top changes when this does. If we start collecting something new, that is a change to this page in the same release.

The FAQ covers the common questions, and Terms covers what we can and cannot do with your money.