Apocha is committed to protecting your privacy. This policy explains what data we collect and how we handle it.
Data We Collect
Minimal by Design. We collect only what's necessary to provide the service:
- Wallet Address: Your Solana public key when you connect your wallet (required for x402 payments and transaction verification)
- Transaction Signatures: Solana transaction signatures you submit for receipt minting
- Form Data: Receipt details you provide (service description, invoice ID, country selection)
- Payment Records: x402 payment signatures for service usage
Data We Do NOT Collect
- Email addresses or personal contact information
- Names or identity documents
- IP addresses for tracking purposes
- Cookies for advertising or analytics
- Browser fingerprints
How Data Is Used
- Receipt Minting: Transaction data is used to create your NFT receipt
- Payment Verification: x402 signatures are verified on-chain via Solana
- On-Chain Storage: Receipt metadata is stored permanently on Arweave (public, immutable)
- Rate Limiting: Basic request counts to prevent abuse
Third-Party Services
- Solana Blockchain: Transactions are public on the Solana network
- Arweave: Receipt metadata is stored permanently and publicly
- Helius: RPC provider for Solana transaction verification
- Cloudflare: CDN and DDoS protection (may log IP addresses per their policy)
Data Retention
- Blockchain Data: Permanent and immutable (Solana, Arweave)
- Server Logs: Request logs retained for 7 days maximum
- Form Submissions: Not stored after receipt minting completes
Your Rights
Due to the nature of blockchain technology:
- On-chain data (NFTs, transactions) cannot be deleted
- You control your wallet and can choose not to use the service
- No account to delete—we don't store personal profiles
Security
- All connections use HTTPS/TLS encryption
- No passwords stored—wallet-based authentication only
- No sensitive data stored on our servers
Changes
We may update this policy. Changes will be posted on this page with an updated date.
Contact
For privacy concerns, reach out via the project's public channels.