DRAFT — not yet in effect. This policy is under review and may change before BLOR Pay launches.
Privacy policy
This policy explains, in plain language, what information the BLOR Pay app and its servers handle, why, and who helps us run the service.
1. What we never collect or access
- BLOR Pay is non-custodial. Your wallet’s private keys and any recovery details are never sent to us or stored by us, and we cannot move your money.
- Your wallet is created and secured by our wallet provider, Privy. Privy also creates an Ethereum wallet for your account; BLOR Pay does not use it for payments, and our servers do not store its address. A payment is signed with your Solana wallet, through Privy, only when you approve it in the app; our servers never sign payments for you.
- We never hold your funds. A payment moves from the sender’s wallet to the recipient’s wallet on the Solana blockchain.
2. What we collect and why
- Sign-in. You sign in with Apple, Google, email or phone through Privy. We keep the random account identifier Privy assigns to you and link it to your BLOR Pay account. To find your wallet, we ask Privy for your account details and keep only your wallet’s public address; we do not store your email address or phone number.
- Your wallet address and payment ID, so others can pay you.
- A display name, if you choose to set one. People who open your payment requests can see it.
- Payment records. For each request or send: the amount, token, recipient address, expiry and a payment reference, and later the public blockchain transaction that settles it. We use these to show your history, confirm payments and prevent a payment from being made twice.
- Network-fee records. When we handle the network fee for a payment, we keep the prepared transaction, your wallet address, the fee and whether the payment landed, so the fee can be paid safely and only once.
- Basic technical logs. Our servers record operational events, such as which step of a request failed and the type of error, so we can keep the service running. These records do not contain your name, email, phone number, sign-in identifier or wallet address. Our hosting provider processes your IP address to deliver and protect the service; we use it only for short-term rate limiting and do not store it.
- On your phone. The app keeps your payment history and settings on your device. It uses your camera only when you choose to scan a QR code.
3. Public blockchain data
Payments are recorded on the Solana blockchain, which is public. Wallet addresses, amounts, times and transaction IDs can be seen by anyone, permanently. Neither we nor anyone else can change or delete them.
4. Service providers
We use these providers to run BLOR Pay. Each handles only what it needs for its task.
| Provider | What it does | What it processes |
|---|---|---|
| Privy | Sign-in and your wallet | Your sign-in details (Apple, Google, email or phone) and your wallet |
| Supabase | Our database | The records described in section 2 |
| Cloudflare | Hosting for our servers and this website | Requests to our servers, including your IP address |
| Solana network providers (RPC) | Reading the blockchain and sending transactions | Wallet addresses, balances and transactions |
| Jupiter | Token prices used to price network fees | Only token identifiers; no information about you |
| Telegram | Operational alerts to our team about our own fee account | No names, email addresses, phone numbers or sign-in identifiers; an alert may include a payment’s internal reference and its public transaction ID |
If you sign in with Apple or Google, that company also handles your sign-in under its own privacy policy.
5. What we don’t do
- We do not sell your personal information.
- We do not use advertising or analytics trackers in the app or on this website.
- This website sets no cookies and loads nothing from other sites.
6. Your requests
Email admin@blorpay.com from the contact details linked to your account to ask for a copy of the information we hold about you, or for its deletion. We may need to confirm the request comes from you.
Public blockchain data cannot be deleted (section 3). Records of completed payments may need to be kept as evidence that a payment happened; we will tell you if we have to keep anything and why.
7. Updates and contact
If we change this policy, we will post the new version on this page with a new date.
GOLDWOOD UNITY LLC · admin@blorpay.com