Privacy Policy

What we collect

• Account info: your name, email, phone (optional), country.
• Wallet activity: every credit and debit on your wallet, with timestamps.
• API usage: if you mint API keys, we log the method, endpoint, status and latency of every call — but never the request or response body.
• Order history: the listings you bought and when. Delivered credentials are encrypted at rest with AES-256-GCM.

What we don't collect

• We don't store the plaintext of your reseller API keys. Only a hash.
• We don't store the bodies of your API requests or responses.
• We don't sell your data to third parties.

Cookies

We use a session cookie to keep you signed in and a consent cookie to remember your choice on the cookie banner. Both are first-party only.

Payments

When you fund your wallet, your card details are handled by Korapay, not by us. We only see the payment reference, amount and status.

Contact

Questions about your data? Email the address on our contact page.