Legal
Privacy Policy
Version
Draft: this document is being reviewed by our lawyers before live payments open, and may change. Test mode moves no real money.
This policy explains how Wolf Pay ("Wolf Pay", "we") handles personal information about the people who use Wolf Pay: business owners and their team members, their customers who pay through Wolf Pay, and the people they pay. For the businesses' own customers and payees, the business is usually the one responsible for their data, and we process it on its behalf.
What we collect
| What | Why | |
|---|---|---|
| Your account | Email address, name, role, sign-in and two-factor records, team membership | To run your account and keep it secure |
| Your business | Business name, website, country and state, what you sell and plan to do with Wolf Pay | To set up your account, check we can serve you, and improve the product |
| Verification | Bridge runs business verification (with its identity partner). We receive the outcome and status, not your documents | To know whether live payments can open |
| Payments and payouts | Amounts, coins, networks, wallet addresses, transaction hashes, order ids and descriptions you send us, customer emails you choose to give us, recipient names and emails for payouts | To process payments, payouts and refunds, keep the ledger and prevent fraud |
| Use of the site | Server logs (IP address, browser, pages requested) and how you found us (campaign tags and the referring site, in a cookie) | Security, fixing problems and seeing which channels bring businesses |
We don't sell personal information, and we don't use it for advertising.
Cookies
We use only cookies we need: sign-in session cookies, wp_merchant (which of your businesses you're looking at) and wp_ft (how you first found us: campaign tags, referring site and landing page, kept 90 days and stored with your business when you sign up). There are no advertising or third-party tracking cookies.
Who we share it with
Only service providers who help us run Wolf Pay, each bound to protect it:
- Bridge (custody, verification, transaction screening and transfers for live payments)
- Supabase (database, sign-in and server functions) and Vercel (website hosting)
- Resend (sending email)
- NEAR Intents 1Click (converting other coins when a customer pays with one: it receives the amounts and wallet addresses of that conversion)
We also share information when the law requires it, to protect people or Wolf Pay from fraud or harm, or with a buyer if Wolf Pay is sold (who must keep this policy's promises). Blockchain transactions are public: anyone can see transfers to and from a wallet address, which is outside our control.
Where it's stored
Our providers store data in the United States and other countries. Where the law requires, we use safeguards such as standard contractual clauses for transfers.
How long we keep it
While your account is open, then as long as the law requires for financial records (usually 5 to 7 years after the account closes), then we delete or anonymise it. Server logs and job history are kept for days to weeks.
Your rights
Depending on where you live, you can ask to see, correct, delete or receive a copy of your personal information, object to or restrict how we use it, and withdraw consent. We may need to keep some records the law requires. Ask us at Talk to us in the dashboard (or reply to any email from Wolf Pay), and we'll answer within 30 days. You can also complain to your data protection authority.
Security
Row-level security in the database, two-factor authentication for live money actions, hashed API keys, signed webhooks and encrypted connections. More on the Security page.
Children
Wolf Pay is for businesses, not for anyone under 18.
Changes
We'll post updates here and email account owners about significant changes. The version date is at the top of this page.