Privacy Policy

1.Privacy philosophy & data minimization

At MardiPay, we believe that true financial sovereignty requires uncompromising privacy. We design our non-custodial software following strict data minimization principles: we only collect the minimum technical data necessary to deliver secure, instantaneous dollar payments on Solana. We do not track personal financial habits, profile users, or monetize user data.

2.Information we collect

Depending on your interaction with MardiPay, we may process limited categories of operational information:

• Account Identifiers: Your verified phone number, optional public display name, and the generated public Solana wallet address used to map peer-to-peer payments.
• Transaction Metadata: On-chain transfer signatures, timestamps, token mints, and public recipient addresses indexed directly from the Solana public ledger to render your transaction history and balances.
• Diagnostic Telemetry: Anonymized technical metrics such as device type, browser version, and crash logs to maintain platform performance and service availability.

3.What we never access or store

MardiPay is completely non-custodial. We have zero access to:

• Your private cryptographic keys, seed phrases, or master encryption keys.
• Biometric data (FaceID / TouchID credentials remain isolated in your device hardware security module).
• Banking passwords, credit card credentials, or off-chain personal communications.

4.How we use information

We process collected data exclusively for legitimate operational objectives:

• Resolving phone numbers and handles to public Solana wallet addresses for peer transfers.
• Displaying formatted payment receipts, notifications, and balance histories.
• Protecting platform endpoints from bot spam, credential stuffing, and DDoS attacks.
• Optimizing application latency, RPC synchronization, and interface responsiveness.

5.Public blockchain transparency

Transactions executed through MardiPay are broadcast directly to the decentralized Solana blockchain:

• All on-chain transfer details (including amounts, signatures, and public wallet keys) are publicly inspectable by anyone via block explorers.
• Due to the immutable and decentralized nature of public blockchains, recorded transactions cannot be edited, hidden, or deleted by MardiPay or any third party.

6.Third-party infrastructure & disclosures

We never sell, rent, or trade your personal data. We disclose operational data only in these defined scenarios:

• RPC & Validator Nodes: Transaction payloads are transmitted to RPC node providers (e.g. Helius) strictly to validate and broadcast blocks to Solana.
• Infrastructure Partners: Secure hosting and CDN providers route network traffic, mitigate DDoS threats, and ensure TLS encryption.
• Legal Inquiries: We may share the limited operational data in our possession only when strictly mandated by a valid court order, subpoena, or applicable law.

7.Security safeguards

We implement comprehensive technical protections, including end-to-end TLS encryption, secure cryptographic tokens, and rate limiting. However, no internet transmission is completely immune to risk. You are responsible for safeguarding your personal device, browser environment, and phone authentication access.

8.Your rights & data control

Depending on your jurisdiction, you have the right to request access to the personal data we store, request corrections to profile records, or request account deactivation. To exercise these rights, please email us at contact@mardipay.in. Note that public blockchain entries cannot be altered or erased.

9.Policy updates & revisions

We may update this Privacy Policy periodically to reflect technological changes, product updates, or legal developments. Any revisions will be posted directly to this page with the updated revision date. Continued usage of MardiPay following any update confirms your agreement.

10.Contact & inquiries

If you have any questions or concerns regarding this Privacy Policy or your data, please reach out to us at contact@mardipay.in.