Privacy Policy

This explains what Qupay collects, why, and who it's shared with. It covers the Qupay website and the pay pages hosted on it.

What we collect

• Account: your email, username, and anything you add to your page — display name, bio, photo, banner, links, and payment preferences.
• Payments: amount, currency, method, an optional note and name from the payer, timestamps, and a Stripe payment reference. Full card numbers are handled by Stripe and never reach Qupay.
• Payouts: the last four digits and country of a bank account you connect, plus whatever Stripe needs to verify your identity (collected by Stripe, not stored by us).
• Technical: basic log data such as IP address and browser, used to run and secure the service.

How we use it

• To run your pay page and process payments and payouts.
• To show you your activity and balance.
• To send service email — for example, a notification when someone pays you (you can turn payment emails off in settings).
• To prevent fraud and abuse and to meet legal obligations.

Who it's shared with

We don't sell your data. We share it with the providers that make Qupay work:

• Stripe — card processing, identity verification, and bank payouts.
• Supabase — database and authentication hosting.
• Resend — sending transactional email.

Your pay page is public by design: your username, display name, bio, photo and links are visible to anyone with the link. A payment count is shown only if you enable it.

Retention

We keep account and transaction records for as long as your account is open and for as long afterwards as we need them for legal, accounting, or fraud-prevention reasons.

Your choices

• Edit or remove most profile details yourself in settings.
• Turn off payment notification emails in settings.
• Ask us to access or delete your data by emailing the address below. Some records must be retained where the law requires it.

Changes

If we make a material change to this policy we'll update the date above and, where appropriate, let you know directly.