Privacy policy

ChainPal is a payments and treasury platform for businesses: checkout sessions, invoices, payment links, terminals, payroll, an OTC desk, destinations, and Copilot. This policy explains what information we collect in connection with that platform, why, and what you can do about it.

1. Information we collect

Business and identity information. To open an account we collect company details, beneficial ownership information, government-issued identification, and business registration documents, as required for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.

Account and team information. Names, email addresses, and role or permission level for each staff member your business invites to the platform.

Transaction information. Records of the activity you run through ChainPal: OTC orders and quotes, checkout sessions, invoices, payment links, terminal transactions, payroll runs, and the destination addresses funds are routed to.

Communications. Messages sent through the contact form, support conversations, and correspondence with the OTC desk.

Usage and device information. IP address, browser type, device information, and the pages of chainpal.org and the ChainPal dashboard you visit.

2. How we use this information

• To operate the platform: route payments to the destinations you specify, price and settle OTC orders, run payroll, and generate invoices and payment links.
• To verify your identity and your business’s, and to meet KYC, AML, and other regulatory obligations that apply to a payments business.
• To detect, investigate, and prevent fraud, unauthorized access, and other misuse of the platform.
• To provide support and respond to questions sent through the contact form or the OTC desk.
• To maintain, secure, and improve the platform.
• To send service updates, such as changes to fees, security notices, or changes to this policy.

3. ChainPal never holds your funds

ChainPal is not a custodian. Every payment lands on a single-use address and routes straight through to a destination your business owns; on OTC, ChainPal is the counterparty to the trade itself, not a custodian of funds in transit or at rest. This does not reduce what identity and transaction information we need to collect to meet our compliance obligations, but it does mean we are not holding a running balance of your funds on your behalf.

4. How we share information

We do not sell your information. We share it only where necessary to operate the platform and meet our legal obligations:

• With banking and payment rail partners, to execute transactions you initiate.
• With identity verification providers, to complete KYC checks.
• With regulators and law enforcement, where required by law.
• With service providers who support our operations (for example, customer support tooling), under confidentiality obligations.
• With professional advisors, such as auditors or counsel, where necessary.

5. Data security

We use industry-standard encryption in transit and at rest, and restrict access to personal and financial information to staff who need it to do their jobs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention

We retain account, identity, and transaction information for as long as your account is active, and afterward for as long as applicable recordkeeping regulations require, which for KYC and AML records is typically several years after account closure. This retention period is subject to confirmation by legal and compliance counsel.

7. Cookies

chainpal.org uses a small number of cookies: essential cookies needed for the site to function, and cookies from Intercom, which powers our support conversations. We do not use cookies to sell advertising.

8. Your rights

Depending on where your business is located, you may have the right to access, correct, or request deletion of information we hold about you; to object to or restrict certain processing; and to request a copy of your data in a portable format. Some of these rights are limited where information must be retained to meet KYC, AML, or other regulatory obligations. To exercise a right under this section, contact us using the details below.

9. International data transfers

Because ChainPal serves businesses across borders, information may be processed in countries other than your own. Where required, we use appropriate safeguards for these transfers.

10. Children’s privacy

ChainPal is a business platform and is not directed at children. We do not knowingly collect information from children.

11. Changes to this policy

We will update the "last updated" date at the top of this page whenever this policy changes, and will provide notice of material changes.

Contact us

Questions about this policy can be sent to help@chainpal.org, or through the contact form.