Data Protection · Zero-PII Architecture

Privacy Policy

Our privacy principle is simple: the most secure data is the data we never collect.

1. Zero Collection of Personal Financial Data

Unlike traditional payment processors, RobinPay does not collect, process, or store customer credit card numbers, bank account routing details, Social Security Numbers, government IDs, or physical home addresses.

Payment authorization is executed cryptographically through the user’s self-custodial wallet (e.g., MetaMask, Coinbase Wallet, Rabby) directly to the blockchain network.

2. Public Blockchain Records

Transactions processed on Robinhood Chain are broadcast to a public, distributed ledger. Information such as the sender address, recipient address, transferred amount, and transaction timestamp are visible publicly on blockchain explorers. This transparency is an inherent characteristic of decentralized ledger technology.

3. Stateless Invoice Tokens

RobinPay utilizes self-contained, cryptographically signed invoice tokens. When you generate an invoice, its details are encoded into the link itself rather than stored in a centralized database honeypot. No user tracking profiles are created or maintained.

4. Ephemeral Rate Limiting & Cookies

We do not use tracking pixels, ad cookies, or third-party behavioral profiling. When interacting with the API or dashboard:

  • IP addresses are evaluated in ephemeral volatile memory solely to enforce rate limits against spam or DDoS attacks and are discarded after short rolling windows.
  • Local storage is utilized only on the client machine to remember user theme preferences and recent transactions initiated in your browser session.

5. Contact Regarding Privacy

For questions regarding data architecture or security disclosures, contact our engineering team at privacy@robinpay.xyz.