FinCobra Checkout Privacy Policy

Effective date: April 20, 2026

This Privacy Policy explains how FinCobra processes information in connection with FinCobra Checkout. We aim to keep collection limited to information that is reasonably necessary to operate, secure, bill, and support the checkout service.

Account and security data

When you create or access a FinCobra Checkout account, we may store authentication and account data such as your account identifier, encrypted email address, authentication-provider identifier, account status, and optional two-factor authentication data when you enable extra account security.

Checkout configuration and integration data

To operate your checkout, we store the configuration you choose for the service. This can include invoice defaults, issuer name, visible invoice fields, redirect URL, webhook URL, whether a webhook secret is configured, payment-method settings, merchant-controlled receiving wallet data or destination addresses, and integration API credentials used to create or manage invoices.

Why we use information

FinCobra uses account and service data to authenticate users, secure accounts, save checkout configuration, generate invoices, display hosted payment pages, monitor payment status, record payment events, send webhook and API responses, provide customer support, maintain billing and account access, prevent abuse, and comply with applicable legal obligations.

Invoice, payment, and billing records

We store invoice records and related operational data generated through your use of the service. Depending on what you submit, this can include invoice IDs, amounts, currencies, payment timing, product/service descriptions, issued-by and bill-to fields, customer email, internal references, metadata notes, selected payment options, exception-resolution notes, and export data.

We also store payment-event data needed to operate and reconcile the checkout flow, including network, asset, destination or observed address, transaction hash, confirmation count, timestamps, statuses, amounts, and other invoice-related payment state. If your account uses paid features, we may also process plan, billing-status, billing invoice, and account-cycle data needed to manage your subscription or paid access.

How we share information

FinCobra may share information with service providers that support the operation of the product, including infrastructure, hosting, authentication, email, billing, analytics, blockchain or node, and support providers. Information may also be disclosed where required by law or where reasonably necessary to protect the service, our users, or our legal rights.

Information that you choose to place on a hosted invoice or public payment page may be disclosed to the payer as part of the checkout flow. Payment information recorded on public blockchains may also be visible through public blockchain networks, explorers, and related data sources.

Security

We use technical and organizational measures intended to protect the information we store, including encryption for sensitive stored data. No system can guarantee absolute security, and you should configure your account and wallet environment accordingly.

Retention

We retain information for as long as reasonably necessary to operate the service, maintain security, comply with legal obligations, resolve disputes, and preserve business records connected to your checkout activity.

Retention periods may vary depending on the type of data and whether your account remains active. Invoice, payment, and billing records may be retained longer than account-profile data because they are needed for operational, accounting, compliance, and dispute-resolution purposes.

Changes to this Policy

FinCobra may update this Privacy Policy from time to time. The latest version will always be posted on this page with the effective date shown above.

Contact

Questions about this Privacy Policy can be sent to [email protected].