01
Short version
Razepay has no accounts and no advertising trackers, and does not sell data. Orders are linked to a public wallet address, not to your name.
02
What we process
Your IP address and the country derived from it, at the network edge, to enforce regional restrictions and to limit abuse (as salted hashes in memory, for at most an hour).
Orders: the wallet that receives your coin, the coin details you upload (published on IPFS through pump.fun, permanently and publicly), the price and how you paid (payment method type, card brand, last four digits and funding type as reported by Stripe), the order's transactions and a short log. We store orders in our database (Cloudflare D1) for [OPERATOR: period], and as long as needed for accounting, refunds, disputes and legal obligations.
Card payments are handled by Stripe, which processes your card details, billing details and device information under its own privacy policy, including for fraud prevention. We never receive your full card number.
Wallet addresses are screened against sanctions lists on our server and, when configured, with Chainalysis.
03
What stays in your browser
The Tap Wallet's private key, your order links, a draft of the coin you are designing, your acceptance of these terms and a cache of recently seen coins are kept in your browser's storage and never sent to us (the key never leaves your browser at all). Clearing your site data removes them.
04
Third parties
Your browser connects directly to Stripe (card payments), Solana RPC providers, PumpPortal, pump.fun, IPFS gateways, an image resizing service and price services. They receive your IP address under their own privacy policies. Our hosting provider (Cloudflare) processes requests and stores our database on our behalf.
05
Public data
Transactions on Solana and files on IPFS are public and permanent. We cannot change or delete them.
06
Your rights
Depending on where you live you may have rights to access, correct, delete or object to the processing of personal data. Some records must be kept for accounting, refunds, disputes, sanctions and legal obligations. Contact [OPERATOR: privacy email]. Controller: [OPERATOR: legal name and address]. You may complain to your data protection authority.