Privacy policy
This policy explains what Switch Pay, a service of Verdant Payments, collects from merchants, partners, applicants, shoppers and visitors, why, and what your choices are.
What we collect
Merchants, partners and applicants
- Business details: legal name, website, expected volume, store platform, and anything you write in an application or support message.
- Contact details: name, work email, phone.
- Account and payout details: portal logins, API keys, and the receiving wallet address you register.
- Verification documents we may request to confirm identity or ownership.
Shoppers
- Order details supplied by the merchant: order id, amount, and the merchant's callback URL.
- Payment details: the one-time payment address, the app or wallet chosen, the on-chain transaction hash, sending address, amount and time.
- Technical details: IP address, browser and device type, and pages viewed on the checkout, used for security and fraud prevention.
We do not ask shoppers for a name, email, card number or bank login on the checkout page, and we never see their app credentials.
Website visitors
Standard server logs (IP address, user agent, pages requested). This site does not use advertising trackers.
How we use it
- To review applications, open and run merchant and partner accounts, and pay out funds.
- To detect payments, notify merchant stores, and keep records of every transfer.
- To prevent fraud, screen addresses against sanctions lists, and meet legal obligations.
- To provide support and send service messages. We send marketing only to people who asked for it, and every marketing email has an unsubscribe link.
Who we share it with
- Merchants see the payment details for their own orders, including the shopper's sending address and transaction hash.
- Service providers who host our systems, send our email, or help us screen addresses, under contracts that limit their use of the data.
- Authorities, where the law requires or to protect against fraud or harm.
- A successor, if Verdant Payments is involved in a merger or sale, with notice to you.
We do not sell personal information.
Public networks
Transfers on USDC, PYUSD and Bitcoin networks are recorded on public ledgers that we do not control. Sending addresses, amounts and times are visible to anyone. We cannot delete or alter those records.
Retention
We keep account and transaction records for as long as an account is open and for at least five years after, to meet financial record-keeping rules. Application data for declined or abandoned applications is kept for up to 12 months. Server logs are kept for 90 days.
Security
Data is encrypted in transit. API keys and secrets are stored hashed or encrypted. Access to production systems is limited to staff who need it and is logged. No system is perfectly secure; if we learn of a breach affecting you, we will notify you as the law requires.
Your choices and rights
You can see and update your account details in the portal or by emailing us. Depending on where you live, you may have rights to access, correct, delete or export your personal information, or to object to certain uses. Write to [email protected] and we will respond within 30 days. We may need to keep some records for legal reasons even after a deletion request.
Cookies
The marketing site sets no cookies. The portal and the checkout use strictly necessary cookies for sessions and security only.
Children
Our services are for businesses and adults. We do not knowingly collect information from anyone under 18.
Changes and contact
We will post updates here and email account holders about material changes. Questions or requests: [email protected].