Privacy policy.

The short, legal-style companion to the Privacy Architecture, which describes the system in detail.

Draft for the test phase. A full policy naming the operating entity and jurisdiction will be published before Vesta processes real-value payments.

Data we process

Merchant contact and account data (email, business name, wallet address), invoice data (amounts, descriptions, order numbers) and payment data (wallet addresses, transaction hashes, amounts). We do not process customer identity data.

Why

To provide the service: sign you in, show payment pages, match on-chain payments to invoices, show your dashboard, and keep the service running securely.

Processors

Supabase (database, sign-in email), Vercel (hosting), blockchain RPC providers, and — only when a customer chooses them — Coinbase (Base wallet, paymaster, onramp) and the WalletConnect relay. Each acts under its own terms.

Retention and deletion

Account and invoice data are kept while your account exists; request deletion by email and we delete the account and its records. On-chain data cannot be deleted by anyone.

Your rights

You can ask what we hold about you, ask for corrections, or ask for deletion at tbracko@gmail.com.

No selling, no ads

We do not sell or rent your data and we do not run advertising or tracking.