Remora Pay is a non-custodial payment orchestration service. By design, we collect minimal data. This policy explains what we collect, why, and how it is handled.

1. What We Collect

Remora Pay collects and stores the following data to facilitate payment orchestration:

• Merchant wallet addresses — the Polygon wallet address you provide for receiving USDC settlement
• Order amounts — the fiat value and USDC equivalent of each transaction
• Transaction hashes — on-chain transaction identifiers for payment verification
• Smart contract addresses — the deployed splitter contract associated with your store
• WooCommerce order IDs — to map payments back to your store orders
• Store domain — the URL of your WooCommerce store

What We Do Not Collect

Remora Pay does not collect, process, or store:

• Credit card numbers, CVVs, or card expiration dates
• Bank account details
• Government-issued ID or identity documents
• Customer personal information (names, emails, addresses)

All sensitive payment data (card details, identity verification) is handled exclusively by the third-party payment provider selected by the customer at checkout.

2. Third-Party Payment Providers

When a customer makes a payment through Remora Pay, they interact directly with one of our integrated payment providers. Each provider has its own privacy policy and data handling practices:

• Transak — transak.com/privacy-policy
• MoonPay — moonpay.com/privacy_policy
• Coinbase — coinbase.com/legal/privacy

These providers may collect personal and financial information from customers as part of their own KYC and payment processing requirements. Remora Pay does not control, access, or receive this data.

3. How Data Is Stored

The data we collect is stored in a Supabase database with row-level security policies. Access is restricted to authenticated service operations required for payment orchestration.

Transaction data is also inherently public on the Polygon blockchain. Wallet addresses and transaction hashes are visible to anyone via block explorers.

4. How Data Is Used

We use the data we collect for the following purposes:

• Routing payments to the correct smart contract and merchant wallet
• Verifying payment completion and updating WooCommerce order status
• Displaying transaction history and status to merchants
• Diagnosing and resolving technical issues

5. Data Sharing

We do not sell, rent, or trade your data. We do not share data with advertisers or marketing platforms.

Data may be disclosed only if required by law, regulation, or valid legal process.

6. Cookies

The Remora Pay website and checkout page use minimal or no cookies. We do not use tracking cookies, advertising pixels, or third-party analytics that track users across the web.

7. Data Retention

Transaction records are retained for as long as your merchant account is active, and for a reasonable period thereafter for legal and operational purposes. On-chain data (transaction hashes, smart contract interactions) is permanently recorded on the Polygon blockchain and cannot be deleted.

You may request deletion of off-chain data by contacting us. We will process deletion requests within 30 days, subject to any legal obligations to retain certain records.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your off-chain data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing of your data for specific purposes

To exercise any of these rights, contact support@remorapay.com. We aim to respond to all requests within 30 days.

9. GDPR Compliance

For users in the European Economic Area: the legal basis for processing your data is legitimate interest (providing the payment orchestration service you signed up for) and contractual necessity. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes will be communicated through the website or plugin dashboard.

11. Contact

For privacy-related questions or requests, contact us at support@remorapay.com.