Privacy,fullyprotected.

We collect information you provide directly, information generated by your use of the platform, and information from third-party verification providers.

Account information

• Name, email address, password (hashed), MettaTag, account type
• Two-factor authentication settings and recovery codes

Identity verification (KYC/KYB)

• Government-issued ID, selfie/liveness data, date of birth, address, country
• For businesses: incorporation documents, beneficial owner information, EIN/registration numbers

Transaction & wallet data

• On-chain wallet addresses you connect or generate
• Escrow transactions, invoices, counterparties, amounts, timestamps, dispute history
• Risk and AML screening results

Technical data

• IP address, browser type, device identifiers, session logs, error reports

• Provide and operate escrow, payments, and wallet services
• Verify your identity and comply with AML/KYC obligations
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Send transactional notifications (escrow status, disputes, security alerts)
• Improve product reliability and user experience
• Comply with legal, regulatory, and law-enforcement requests

We share data with service providers that help us run the platform, only to the extent necessary:

• Backend & storage — Lovable Cloud hosts the database and file storage
• Identity verification — KYC/KYB providers process ID documents and biometric data
• Blockchain & analytics — node providers and chain-analytics vendors
• Email delivery — transactional email provider
• Law enforcement — when legally required by valid process

We do not sell personal information.

We retain account and transaction records for as long as your account is active and for at least 5 years after closure to satisfy AML record-keeping requirements. KYC documents are retained per applicable law. You may request earlier deletion subject to those obligations.

Depending on your jurisdiction (GDPR, CCPA, and similar), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion (subject to legal retention)
• Export your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with your local data-protection authority

Submit requests to privacy@mettapays.com.

We use TLS in transit, encryption at rest, role-based access controls, audit logging, and two-factor authentication. No system is perfectly secure — please use a strong unique password and enable 2FA.

We use first-party cookies and similar technologies for authentication, session management, and basic analytics. We do not use third-party advertising cookies. See our Cookie Policy.

Questions about this policy? Email privacy@mettapays.com or visit our contact page.