Privacy Policy

Who we are

Bitpaysa is operated by Bitpaysa Limited, a company incorporated in Hong Kong on 27 October 2026, of Unit 1603, 16/F, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong. In this policy, "Bitpaysa", "we" and "us" mean Bitpaysa Limited.

Bitpaysa is a financial technology company. It is not a bank, and it does not hold any banking licence or regulatory authorisation. Funds you hold in the wallet are not bank deposits and are not covered by any deposit insurance scheme.

The short version

• The Bitpaysa wallet is self-custodial: your private keys and seed phrase stay with you. We never collect, see, or store them.
• We process the minimum we need to run the service: your sign-in email, your wallet addresses, and records of transactions you make through the app.
• Identity checks (KYC) for partner services — such as euro bank account details or buying crypto with a card — are performed by those partners under their own privacy policies. We do not collect your ID documents ourselves.
• We do not sell your information, and we do not share it with advertisers or data brokers.

Information we process

Account information. You sign in to the wallet with your email address and a one-time code sent to that email. We store your email address so we can identify your account and sign you in.

Wallet addresses and transaction records. The wallet creates blockchain wallet addresses for you (through our wallet infrastructure provider, Privy — see below). We process your wallet addresses and records of transactions you initiate in the app — sends, receives, swaps and cross-chain moves — so we can display your balances and history, detect deposits to your addresses, and keep the service working. Wallet addresses and on-chain transactions are also publicly visible on the relevant blockchain by the nature of how blockchains work.

Device and technical data. When you use the website or wallet, we and our hosting providers receive standard technical data needed to deliver and secure the service — such as browser type, device information, and IP address used briefly for security and abuse prevention.

Information connected to partner services. Some features are provided with partners:

• Euro (EUR) account details. Euro account details for receiving SEPA transfers are made available to eligible users through our banking partner, Monerium. Monerium performs identity verification (KYC) itself, under its own privacy policy. We receive confirmation of your verification status and the account details (such as the IBAN) needed to show them to you in the app and operate the feature. We do not receive or store Monerium's full KYC file.
• Buying crypto with a card. Card purchases are sold and processed by third-party on-ramp providers. Those providers perform their own identity checks and payment processing under their own policies. We receive confirmation that a purchase was made so the crypto can be delivered to your wallet address.
• Swaps and cross-chain moves. When you swap assets or move USDC between chains inside the wallet, third-party liquidity and bridging providers execute the transaction. They receive the transaction details necessary to do so (such as the assets, amounts, and your wallet addresses).

Messages you send us. If you contact us, we keep the correspondence so we can respond and support you.

What we never collect

We never collect, see, or store:

• your private keys or seed phrase — the wallet is self-custodial, keys stay with you, and we cannot recover them for you;
• your full card numbers — card payments are handled by the on-ramp provider;
• your government ID documents — identity verification, where required, is done by the relevant partner (for example Monerium or an on-ramp provider), not by us.

Anyone who asks you for your seed phrase or private keys claiming to be Bitpaysa is not us. Never share them.

How we use information

• To create and secure your account and sign you in.
• To operate the wallet: display balances and history, detect deposits, and execute the transactions you initiate.
• To provide partner features you choose to use, such as euro account details and card purchases.
• To prevent fraud, abuse, and misuse of the service.
• To respond to your messages and support requests.
• To comply with legal obligations that apply to us.

Who processes information for us

We use a small number of service providers, each processing information only as needed for its role:

• Wallet infrastructure — Privy provides the wallet infrastructure behind the app. Your keys remain yours; Privy's role is the technical wallet layer.
• Hosting — Vercel hosts this website and the wallet web app.
• Database hosting — our database provider stores account, address, and transaction records.
• Banking partner — Monerium provides euro account details and SEPA receiving for eligible users.
• On-ramp providers — third-party providers sell crypto for card payment and deliver it to your wallet.
• Swap and bridging providers — third-party liquidity and bridging providers execute in-wallet swaps and cross-chain moves.
• Blockchains — transactions you make are recorded on public blockchains; addresses and transaction data on a blockchain are public and permanent.

Some of these providers operate outside Hong Kong, so information may be processed in other countries in the course of providing the service.

Sharing

We share information only: (a) with the providers described above, as needed to run the service and the features you use; (b) where we are required to by law, court order, or a competent authority; or (c) with your consent. We do not sell personal information.

Cookies and local storage

This website does not use advertising or analytics cookies. The wallet uses local storage on your device for your preferences (such as theme, country, and display currency) and for session and security purposes needed to keep you signed in. These stay on your device; we do not build advertising profiles from them.

Retention

We keep account and transaction information for as long as your account is active and as needed afterwards to operate the service, resolve disputes, prevent abuse, and meet legal obligations. Records written to a public blockchain cannot be altered or deleted by us.

Your rights

You can ask us to: tell you what personal information we hold about you, correct information that is wrong, or delete your information (subject to records we must keep by law and to the limits of public blockchain records described above). Email support@bitpaysa.com from the email address on your account and we will action your request.

Information held by a partner — for example Monerium's KYC records or an on-ramp provider's payment records — is controlled by that partner; you can exercise your rights with them directly under their privacy policy.

Security

We use technical and organisational measures appropriate to a service of our size and stage to protect the information we process. No system is perfectly secure, and we cannot guarantee absolute security. Protecting your own sign-in email account and devices is an essential part of keeping your wallet safe.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "Last updated" date. Where a change is significant, we will take reasonable steps to bring it to your attention.

Governing law

This policy and our processing of your information are governed by the laws of Hong Kong.

Contact

Questions about this policy, or requests about your information: support@bitpaysa.com.

For partnerships and business enquiries: reyad@bitpaysa.com.

Bitpaysa Limited, Unit 1603, 16/F, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong.