Privacy Policy

Last updated: July 14, 2026

This Privacy Policy explains how Brionic Security LLC ("Brionic", "we", "us") collects, uses, and protects information in connection with Brionic Payments (the "Service"). We designed the Service to collect as little personal data as possible.

Information we collect

• Account data: your business name, your name, and email address. We do not store passwords, sign-in is passwordless (passkeys and one-time email links).
• Customer records you enter: the names, emails, and optional wallet addresses of the customers you invoice.
• Invoice & payment data: invoice details and the on-chain transactions that settle them. Blockchain transactions are recorded on public ledgers (XRP Ledger, Stellar) and are not controlled by us.
• Technical data: limited IP address and user-agent information used for security, rate-limiting, audit logging, and first-party traffic analytics, and a session cookie required to keep you signed in. We use your IP address to derive an approximate location (city/country level) and your user-agent to identify the general browser and device type. This helps us secure the Service and understand, in aggregate, which regions and device types use it so we can improve the product. We do not collect precise GPS location.
• Sign-in: signing in happens at Brionic ID, our own identity service. It tells us only who you are — a stable identifier, your verified email address and your name. Any check that you are a person rather than a bot is performed there, so this Service no longer sends anything to a third-party challenge provider. Programmatic access (API keys, MCP, x402) does not sign in at all.
• Support messages: if you contact us through the support form, we keep the name, email, and message you provide so we can respond.

How we use information

• To provide the Service, create and send invoices, and detect and reconcile on-chain payments that settle directly to your own wallets.
• To send transactional email (sign-in links, invoices, receipts, reminders).
• To secure the Service and prevent fraud and abuse.
• To understand aggregate site traffic, approximate region and device type, so we can improve the Service (for example, deciding whether to build a mobile app). This is first-party analytics; we do not use it to identify or target you individually.
• To comply with legal obligations.

What we don't do

• We do not sell your personal information.
• We do not run third-party advertising or analytics trackers on the Service.
• We do not use your data for individualised or cross-site ad targeting.
• We do not store account passwords.

Where your data is stored

The Service is built and operated in the United States by Brionic Security LLC, and your data is hosted in the United States. We work with a small number of trusted service providers (such as hosting and email delivery) under confidentiality obligations, and share only the minimum information needed to run the Service. We may disclose information where required by law, and we do not sell your data. Blockchain transactions, by their nature, are recorded on public, globally-distributed ledgers (the XRP Ledger and Stellar) that we do not control.

Data retention

We retain account, invoice, and transaction records for as long as your account is active and as needed to comply with legal, tax, and accounting obligations, then delete or anonymize them.

Security

We protect data in transit with TLS, use passwordless and phishing-resistant sign-in, store API keys only as hashes, sign webhooks, and apply strict security headers including a content-security-policy. No system is perfectly secure, but we work to minimize the data we hold and the ways it can be exposed.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To make a request, contact [email protected].

Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes

We may update this Policy from time to time. Material changes will be posted here with an updated date.

Contact

Questions about privacy? Contact [email protected] or use our support form.