See what we see.
This is a plain description of what Vesta collects, stores, does not collect, and what is public on the blockchain. It is generated from how the system is actually built, not from a policy template.
What Vesta collects
From merchants (the business creating payment links):
- Email address — used only to send the sign-in link and identify your account.
- Business name — shown to your customers on the payment page.
- Wallet address — where your payments settle.
- For each invoice you create: amount, currency (USDC), a description and an optional order number, and how long the link stays valid.
- If you create an API key: a one-way hash of it. The key itself is shown to you once and not stored.
From customers (the person paying):
- Nothing that identifies them personally. There is no account, no name, no email, no phone number.
- The wallet address that paid and the transaction hash — both of which are already public on the blockchain.
What Vesta stores
| Record | Contents | Why |
|---|---|---|
| Merchant account | email, business name, wallet address, hashed API key, created date | To let you log in and receive payments |
| Invoice | amount, description, order number, status, expiry, a random payment reference, your wallet address at the time | To show the payment page and match the payment |
| Payment | transaction hash, block number, paying wallet address, amount, fee split, confirmations, status | To confirm the payment and show it in your dashboard |
| Event log | technical events (invoice created, payment detected/confirmed, errors) with invoice ids and transaction hashes | To operate the service and investigate problems |
What Vesta does not collect
- No customer names, emails, phone numbers, addresses or identity documents.
- No card numbers or bank details — Vesta has no card or bank integration.
- No private keys or seed phrases. Ever. Your wallet signs; Vesta only reads the blockchain.
- No advertising or tracking cookies. The only cookie is the merchant sign-in session.
- No browsing behaviour, device fingerprinting or analytics profiles.
What happens on-chain (public, permanent)
Blockchains are public. When a customer pays, the following is visible to anyone, forever, on Base Sepolia:
- The paying wallet address, the merchant wallet address and the Vesta fee wallet address.
- The USDC amounts: gross, fee and merchant amount.
- A random payment reference (a 32-byte identifier). It does not contain the invoice description, order number, business name or any personal data.
Invoice descriptions and order numbers stay in Vesta's database and are never written to the blockchain.
Who can access your information
- You see your own account, invoices and payments after signing in.
- Your customer sees only what is on the payment page: your business name, the amount, the description and the payment status.
- Vesta operators can see all merchant and invoice records in an admin view, to run the service and resolve problems.
- Service providers that process data on Vesta's behalf: Supabase (database and sign-in emails), Vercel (hosting), a blockchain RPC provider (reading the chain). If a customer chooses “Pay with Base”, Coinbase provides that wallet under Coinbase's own terms; if they use a phone wallet via QR code, the WalletConnect relay carries encrypted messages between the page and the wallet.
Vesta does not sell, rent or share transaction information with advertisers or data brokers.
How long information is retained
- Merchant account and invoice records: for as long as your account exists. Ask us to delete your account and the records go with it.
- Payment records: kept with the invoice, since the underlying transaction is permanent on-chain anyway.
- Event log: operational, kept for a limited period and pruned.
- Test-phase data (Base Sepolia): may be reset at any time.
How to verify this
The smart contract that moves the funds is public and small enough to read in a few minutes; it has no owner and no function that lets Vesta move anyone's USDC. The database schema described above is part of the Vesta codebase. When Vesta publishes its source, this page will link to both.