Privacy Policy

1. Introduction

ShadowPay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our privacy-first onchain banking platform. Privacy is not an optional feature at ShadowPay—it is embedded at the protocol level.

2. Our Privacy-First Approach

ShadowPay is designed with privacy as a fundamental principle. We use zero-knowledge proofs, authorization-based banking, and shielded liquidity pools to minimize data exposure. Unlike traditional financial services, we do not maintain per-user balances or transaction histories that can be linked to your identity.

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

• Email address for authentication and communication
• Identity verification data (KYC) as required by applicable regulations
• Device and session information for security purposes

3.2 Transaction Data

ShadowPay is designed to minimize transaction data collection. We do not store:

• Wallet addresses linked to your identity
• Per-user balance information
• Linkable transaction histories

Transactions are processed through zero-knowledge proofs and relayer networks, ensuring that payment authorization does not reveal your identity or balance information.

3.3 Technical Information

We may collect technical information such as:

• IP addresses (anonymized where possible)
• Browser and device information
• Usage patterns and service interactions
• Error logs and diagnostic data

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and authorize transactions
• Comply with legal and regulatory requirements
• Prevent fraud, abuse, and security threats
• Communicate with you about the Service
• Enforce spending limits and policy constraints

5. Zero-Knowledge Proofs and Privacy

ShadowPay uses zero-knowledge proofs to enable private transactions. These cryptographic proofs allow us to verify:

• That you have completed identity verification
• That transactions comply with spending limits
• That authorization rules are satisfied

Crucially, these proofs reveal nothing beyond the fact that the rules were satisfied. Your identity, balance, and transaction history remain private.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

• Legal Requirements: When required by law, court order, or regulatory authority
• Compliance: To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations
• Service Providers: With trusted third-party service providers who assist in operating the Service, subject to strict confidentiality obligations
• Security: To protect the rights, property, or safety of ShadowPay, our users, or others

7. Data Retention

We retain your information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Due to our privacy-first architecture, we minimize data retention and do not maintain long-term transaction histories linked to your identity.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to processing of your information
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided in Section 12.

9. Security Measures

We implement industry-standard security measures to protect your information, including:

• End-to-end encryption for sensitive data
• Zero-knowledge proof systems for transaction privacy
• Secure authentication and authorization mechanisms
• Regular security audits and assessments
• Access controls and monitoring

10. Children's Privacy

ShadowPay is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at shadowpay.app or refer to our documentation.