Privacy Policy

1. Overview

This Privacy Policy explains how SchnelPay LLC (“SchnelPay,” “we,” “us,” or “our”) collects, uses, and protects your information when you use our Service. By using the Service, you agree to the practices described in this Policy.

SchnelPay LLC is a California limited liability company operating schnelpay.com, dashboard.schnelpay.com, admin.schnelpay.com, and api.schnelpay.com (collectively, the “Service”).

2. Our Approach to Data

We collect only the minimum data necessary to operate the Service, comply with applicable law, and provide a reliable user experience.

No Sale or Sharing Under CPRA. We do not “sell” or “share” personal information as defined under the California Consumer Privacy Act / California Privacy Rights Act (Cal. Civ. Code §1798.140).

We do not run advertising networks, retargeting programs, or behavioral profiling systems.

3. Information We Collect

Information You Provide

• Email address and account credentials (passwords stored as bcrypt hash — never plain text)
• Profile information (optional): display name, date of birth, nationality, phone number, address
• Wallet addresses: public blockchain addresses (we never collect private keys)
• Transaction records: amounts, currencies, blockchain networks, transaction hashes, notes
• Support communications and feedback

Automatically Collected Information

• IP address, browser type, pages visited, timestamps
• Device information: operating system, browser version
• Authentication tokens stored in your browser

4. How We Use Information

• Provide, maintain, and improve the Service
• Authenticate your identity and secure your account
• Process transactions and maintain transaction history
• Send transactional emails (account verification, password reset)
• Detect fraud, abuse, and security incidents
• Comply with applicable law and legal obligations

5. Sharing of Information

We may share information with:

• Service providers: Hosting (Railway), email (Resend), licensed payment partners
• Legal authorities: When required by law, court order, or government authority
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data.

6. Security

• Passwords hashed with bcrypt (12 rounds)
• All API traffic encrypted with TLS 1.3
• Authentication protected by QuantumShield™ — ML-DSA-65 + ECDSA (NIST FIPS 204)
• JWT tokens with 7-day expiry and timing-safe comparison
• Rate limiting on all authentication endpoints

7. Your Rights

• Access: Know what personal information we collect and how we use it
• Correct: Request correction of inaccurate information
• Delete: Request deletion of your personal information
• Restrict: Object to or restrict certain processing
• Opt-out: Direct us not to sell or share your information
• Non-discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, email [email protected]. We will respond within 45 days.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. We retain transaction records for 7 years to comply with financial recordkeeping requirements. You may request deletion at any time by emailing [email protected].

9. Third-Party Services

Our Service integrates with licensed payment partners for fiat-to-crypto processing. Their privacy practices govern their services. SchnelPay is not responsible for third-party privacy practices.

Conversion Provider (Transak)

SchnelPay integrates with Transak, a third-party provider, to enable the purchase of cryptocurrency and the conversion of cryptocurrency to fiat currency (“cash-out”). This feature is delivered through Transak’s own hosted interface (a widget or page operated by Transak). When you use it, you interact directly with Transak, and your transaction is processed by Transak, not by SchnelPay.

Because the conversion runs in Transak’s hosted interface, the personal and identity-verification information you enter to complete a conversion — including any KYC information, payment details, and identity documents — is collected directly by Transak, under Transak’s own privacy policy and terms. SchnelPay does not collect, receive, or store the identity documents or payment details you provide to Transak.

To initialize the conversion, SchnelPay passes a limited set of technical information to Transak to set up the session: your destination wallet address, your selected cryptocurrency and (where applicable) fiat currency, and a partner order reference that includes an internal SchnelPay account identifier so the session can be associated with your account. SchnelPay does not transmit your identity-verification documents, payment credentials, or contact information to Transak; you provide those to Transak directly through its hosted interface.

Transak’s handling of your information is governed by Transak’s own privacy policy, which we encourage you to review at transak.com/privacy-policy before using the conversion feature. Consistent with the rest of this Policy, we do not sell your personal information.

10. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of the Service constitutes acceptance.

11. Contact

SchnelPay LLC
California, USA
Email: [email protected]