Privacy Policy
MVP engineering copy. Not legal advice and not counsel-approved. The operator must obtain counsel before production launch.
What we store
Lawful basis (GDPR sketch): contract performance for order fulfillment; legitimate interest for fraud prevention (rate limits and payment audit).
Data minimization: no full KYC for this MVP; payment methods store watch-only config, never private keys; decoded source is not stored in the database.
Session: this MVP stores a JWT in browser localStorage (not an HttpOnly cookie). Script access to this origin can read the token. HttpOnly cookie sessions are a later change.
Retention (engineering defaults, not tax advice): invoices and payment events for 7 years; chain tx hashes and addresses for 7 years; upload blobs 30 days after completion; password hashes until account deletion.
Automated data-subject access and erasure (DSAR) is not available in this MVP. A cookie-consent banner is not shown in this MVP.
Processors may include the PostgreSQL host and, when enabled, the self-hosted crypto payment gateway. Cross-border residency is not implied by EUR pricing.