Legal / Privacy Policy
Privacy Policy
This policy explains what personal data Payrolloc collects, why we collect it, how we use and protect it, and the choices you have. 01 Who we are Payrolloc ("Payrolloc", "we", "us") provides software that helps organizations automate, approve, execute, track and reconcile recurring cryptocurrency payments. This policy applies to our website, the Payrolloc application, our API, and related services (together, the "Services"). When an organization uses Payrolloc to pay its people or partners, that organization (our "Customer") generally decides what beneficiary data is processed and why. In that case we process beneficiary data on the Customer's behalf and according to its instructions. 02 Data we collect Depending on how you interact with the Services, we may collect the following categories of data: Account data name, work email, company, role, and authentication details for workspace users. Beneficiary data names, email addresses, beneficiary type, internal tags, and the wallet addresses, assets and networks a Customer uses to pay a beneficiary. Payment records payout amounts, assets, networks, schedules, approval decisions, transaction hashes and timestamps. Usage and device data log data, IP address, browser type, pages viewed and actions taken in the application, used for security and service improvement. Communications messages you send us through forms, email or demo requests, and related scheduling details. 03 What we do not collect Because Payrolloc supports crypto to crypto payments only, we do not collect or store bank account numbers, IBANs, payment card details or other fiat payment credentials. In self-custody configurations, we do not hold your private keys. 04 How we use data We use personal data to: Provide, operate and maintain the Services, including preparing, routing and tracking payments. Enforce the approval policies, allowlists and permissions configured by Customers. Maintain audit trails and records of actions taken in a workspace. Detect, prevent and investigate fraud, abuse and security incidents. Respond to enquiries, provide support and schedule demos. Improve and develop the Services. Comply with legal obligations. 05 Legal bases Where data protection laws require a legal basis, we rely on: performance of a contract with our Customers; our legitimate interests in operating, securing and improving the Services; compliance with legal obligations; and, where required, your consent — for example, for certain marketing communications or non-essential cookies. 06 On-chain data Payments executed through Payrolloc are recorded on public blockchains. Wallet addresses, amounts and transaction hashes written to a blockchain are publicly visible and cannot be altered or deleted by Payrolloc or anyone else. Requests to delete data apply to the records we hold, not to data stored on a public blockchain. 07 Sharing We do not sell personal data. We share it only as follows: Customers workspace users within a Customer organization can see data relevant to their permissions. Service providers vendors that host, secure or support the Services, bound by confidentiality and data protection obligations. Custody infrastructure where a Customer uses managed custody, data needed to operate wallets and execute transactions. Legal and safety where required by law, or to protect the rights, safety or security of Payrolloc, our Customers or others. Business transfers in connection with a merger, acquisition or sale of assets, subject to this policy. 08 International transfers We may process data in countries other than the one in which it was collected. Where required, we use appropriate safeguards for such transfers, such as contractual protections recognized by applicable law. 09 Retention We keep personal data for as long as needed to provide the Services and for the purposes described in this policy. Payment records and audit logs may be retained for longer where needed to meet legal, accounting or security requirements, or as agreed with the Customer. When data is no longer needed, we delete or anonymize it. 10 Security We use technical and organizational measures designed to protect personal data, including access controls, multi-factor authentication, role-based permissions, encryption in transit, and logging. No system is completely secure, and we cannot guarantee absolute security. See our Security page for more on how Payrolloc protects payouts. 11 Your rights Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. If your data was provided by a Customer for example, as a beneficiary please direct your request to that organization; we will assist them in responding. You may also have the right to lodge a complaint with your local data protection authority. 12 Cookies We use cookies and similar technologies that are necessary to run the website and application, and, where permitted, analytics cookies to understand how the Services are used. You can manage non-essential cookies through your browser settings or any cookie controls we provide. 13 Children The Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children. 14 Changes to this policy We may update this policy from time to time. If we make material changes, we will notify Customers through the Services or by email. The "Last updated" date at the top shows when this policy was last revised.
Payrolloc is a crypto-to-crypto payment platform. We do not process fiat currency and do not collect bank account or card details. Wallet addresses and on-chain transaction data are public by nature of the blockchains they live on.
