Privacy Policy

Last updated: August 17, 2025

1. Introduction

This Privacy Policy explains how the Bitsby service, available at bitsby.app and dash.bitsby.app ("Service", "we"), collects, uses and protects information about you. By using the Service you agree to this Policy.

2. What We Collect

Bitsby is a non-custodial service with no KYC, so we collect far less than typical payment providers:

• Account data — email address and password (stored as a hash) that you provide at registration.
• Service data — wallet addresses you add, project settings, invoices you create and payment metadata linked to them.
• Technical data — IP address, browser and device information, and log records collected automatically for security and troubleshooting.
• Analytics data — see Section 5.

3. What We Do NOT Collect

• We do not collect identity documents or perform KYC verification.
• We never have access to your private keys, seed phrases or funds.
• We do not process card numbers or bank account details.

4. Blockchain Data

Cryptocurrency transactions are recorded on public blockchain networks. Wallet addresses and transaction details are public by design, exist independently of the Service and cannot be altered or deleted by us. Consider this before sharing addresses or payment links.

5. Cookies and Analytics

The Service uses cookies required for signing in and keeping your session. Our websites use traffic analytics tools that collect anonymized usage statistics (pages visited, device and browser data, interactions with the page) to help us improve the Service. You can restrict cookies in your browser settings; the core Service will keep working.

6. How We Use Information

• to provide the Service: detect payments, match them to invoices and send notifications you configure (email, Telegram, webhooks);
• to secure accounts and prevent abuse of the Service;
• to respond to support requests;
• to analyze aggregated usage and improve the Service.

We do not sell your data and do not use it for third-party advertising.

7. Sharing of Information

We share information only: with infrastructure providers that host and protect the Service (under confidentiality obligations); when required by applicable law or a lawful request of a competent authority; or in connection with a reorganization of the Service, in which case this Policy continues to apply.

8. Data Retention

Account and Service data are kept while your account is active. After account deletion we remove or anonymize your data within a reasonable period, except records we must keep by law and data recorded on public blockchains, which we cannot delete.

9. Security

We use industry-standard measures: encrypted connections (TLS), password hashing and access controls. The non-custodial design means that even in the worst case your funds cannot be affected — we never hold them. However, no online service can guarantee absolute security; keep your credentials and wallets safe.

10. Your Rights

You may access and update your account data in the dashboard, request a copy of the data we hold about you, or request deletion of your account and associated data by contacting us. We respond to such requests within a reasonable time and in accordance with applicable law.

11. Children

The Service is not intended for persons under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Policy from time to time. The current version is always available on this page with the "Last updated" date above. Material changes will be announced through the Service.

13. Governing Law

This Policy is governed by the laws of the Republic of Kazakhstan.

14. Contact

Privacy questions and requests: [email protected] or Telegram.