Privacy Policy
P2Flux does not require your wallet private key or recovery phrase. Never provide them to P2Flux or to anyone claiming to represent P2Flux.
1. Scope
This policy explains how P2Flux ("we", "us", "our") handles information in connection with the P2Flux website and the P2Flux payment infrastructure.
P2Flux is non-custodial payment infrastructure. It is used by merchants, platforms and developers who integrate it into their own products. Because of that model, this policy is deliberately narrow: it describes only the limited categories of information P2Flux actually handles.
Where a merchant or platform uses P2Flux inside its own product, that merchant or platform is responsible for its own privacy notice and for its relationship with its customers. P2Flux does not host the merchant's customer records or order history as a merchant account.
2. What We Never Ask For
P2Flux will never request or store:
- wallet private keys;
- recovery phrases or seed phrases.
No P2Flux process, form, integration step or support request requires them. If anyone asks you for a private key or recovery phrase in the name of P2Flux, it is not us.
3. Data the Service Does Not Require
Using the P2Flux payment infrastructure does not require P2Flux to collect:
- buyer account profiles;
- buyer identity verification profiles;
- seller identity verification profiles;
- the merchant's customer database;
- the merchant's order history as a hosted merchant account;
- custody balances, because P2Flux does not hold merchant funds.
Buyers do not create a P2Flux account in order to pay, and merchants do not go through a P2Flux onboarding profile in order to integrate. Where P2Flux later introduces a feature that requires additional information, this policy will be updated before that feature applies to you.
4. Website Visitors
You can read this website without submitting personal information. Our hosting infrastructure processes standard server request information, such as IP address, request time, requested page and user agent, in order to serve and secure the site.
This website does not use advertising, behavioural or cross-site tracking. Cookies and similar storage are used only where technically necessary to deliver and secure the site.
5. Integration Enquiries
If you submit the integration enquiry form, we receive the information you choose to provide, which may include:
- name;
- work email;
- company;
- website or product URL;
- product type;
- the integration types you are interested in;
- approximate monthly payment volume, if you provide it;
- your message.
We use this information to evaluate the enquiry, understand the integration and respond to you. Company, website and payment volume are optional.
We do not use enquiry details for advertising, and we do not add you to a marketing list on the basis of an enquiry. Enquiry correspondence is retained only for as long as reasonably necessary to handle the enquiry and any resulting business relationship.
6. Developers and Platforms
If you integrate P2Flux, we handle the information needed to provide the integration to you, such as the contact address associated with your integration, credentials issued to you, and the technical records described in section 7.
You remain responsible for the information you and your product send to the Services, including whether you are permitted to send it, and for your own obligations towards your customers.
7. Operational and Technical Data
Operating payment infrastructure necessarily generates technical records. Depending on the feature used, these may include:
- API request metadata and timestamps;
- IP addresses and security logs;
- payment and subscription identifiers;
- transaction identifiers and blockchain transaction hashes;
- wallet addresses involved in processing a payment;
- error and debug information.
This is operational and technical data, processed to provide, secure, monitor and troubleshoot the Services and to report transaction status back to the integrating system. It is not used to build customer profiles, and P2Flux does not assemble it into a consumer identity record.
Not all of these records are retained indefinitely, and some exist only transiently. Operational data is retained only for as long as reasonably necessary for the purposes for which it is processed, subject to technical, security and legal requirements.
8. Blockchain Data
Payments made using P2Flux execute on public blockchain networks. Those networks independently contain transaction information, which may include wallet addresses, transaction hashes, token transfers, amounts and block or timestamp information.
This information is public on the relevant network independently of P2Flux, and it exists because a transaction was made on that network rather than because P2Flux published it.
P2Flux cannot delete, edit or reverse a transaction that has already been recorded on a blockchain network, and cannot remove such records from third-party explorers or indexers.
9. Cookies and Analytics
This website uses only cookies and similar storage that are technically necessary to deliver and secure it. We do not run advertising, behavioural or cross-site tracking, and we do not build visitor profiles.
Where only technically necessary cookies are used, they exist to deliver and secure the site and not to track you across other websites. We do not use advertising or cross-site marketing trackers.
10. Service Providers
We may use third-party infrastructure and service providers where necessary to host, secure, operate or communicate through P2Flux — for example hosting, email delivery and reliability monitoring. Each provider processes information only as needed to provide its service to us.
We do not share enquiry or operational information with third parties for their own marketing purposes.
11. No Data Sales or Advertising
P2Flux does not sell personal information to advertisers. P2Flux does not use payment information to build advertising profiles or to target advertising.
12. Retention
We keep information only for as long as reasonably necessary for the purposes for which it is processed, subject to technical, security and legal requirements.
Records already written to a public blockchain network are outside our control, as described in section 8.
13. Your Rights
Depending on where you are, you may have rights to request access to, correction of, deletion of, or restriction of processing of personal information we hold about you, and to object to certain processing. To exercise a right, contact legal@p2flux.com.
We may need to verify your request. Two limits apply: we cannot delete records held on public blockchain networks, and we may need to retain certain records where required by law.
14. Security
We use technical and organisational measures appropriate to the limited information we handle, including access controls and encryption in transit. No system is completely secure. Because P2Flux does not hold merchant funds or wallet keys, a compromise of P2Flux systems would not give access to your funds — but you remain responsible for the security of your own wallets, keys and credentials.
15. Changes to This Policy
We may update this policy as the product develops. The date of the current version is shown at the top of this page. Where a change is material, we will aim to give reasonable notice.
16. Contact
Privacy and legal enquiries: legal@p2flux.com
Integration enquiries: integration enquiry form