Privacy Policy

01Information we collect

From a Buyer at checkout. To create a session and deliver a receipt, we collect an email address and mobile number, the destination settlement wallet, and the order details and amount. The card is collected and processed by the licensed on-ramp operator on its own PCI-scoped surface; with a live operator, Arcana does not receive or store your card number.

From a Merchant. Business identifiers, settlement-wallet address, API keys, and contact details you provide to integrate the Service.

Automatically. Basic device, browser, and usage data, and cookies or similar technologies used for security and analytics (see §05). We record settlement events (amount, timestamp, on-chain transaction reference) in an operational ledger.

02How we use information

• To create and settle checkout sessions and deliver receipts.
• To operate, secure, debug, and improve the Service.
• To prevent fraud and abuse and to enforce our terms and Acceptable Use Policy.
• To comply with law, sanctions screening, and network or operator rules.
• To communicate with Merchants about their account and the Service.

03How information is shared

• The licensed on-ramp operator — to process the card, perform KYC/AML, and settle USDC. The operator handles this data under its own privacy policy.
• Service providers — hosting, infrastructure, email delivery, and analytics providers that process data on our behalf under contract.
• Legal and safety — where required by law, regulation, subpoena, or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal information.

04Blockchain settlement

USDC settlement occurs on a public blockchain (Base). On-chain transactions, wallet addresses, and amounts are public and permanent by design and are not controlled by Arcana. Do not treat a public wallet address as private information.

05Cookies and analytics

We use Google Analytics 4 to understand how the site is used. Analytics is configured to anonymize IP addresses. These tools set cookies or use similar identifiers. You can control cookies through your browser settings and may opt out of Google Analytics using Google’s browser add-on. We do not use analytics on the payment checkout itself.

06Data retention

We keep information for as long as needed to provide the Service, meet legal, tax, and compliance obligations, resolve disputes, and enforce our agreements. Settlement ledger records are retained as required for financial recordkeeping. When information is no longer needed, we delete or de-identify it.

07Security

We use technical and organizational measures appropriate to the data, including scoped access, encrypted transport, signed webhooks, and an append-only settlement ledger. No system is perfectly secure; we cannot guarantee absolute security.

08Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To make a request, contact us at the address below; we will respond as required by applicable law. We will not discriminate against you for exercising these rights.

09Children

The Service is for businesses and adult end customers. It is not directed to children under 13 (or the age defined by local law), and we do not knowingly collect their information.

10International users

We operate in the United States. If you access the Service from elsewhere, you understand your information may be processed in the United States, where privacy laws may differ from those in your jurisdiction.

11Changes

We may update this policy. We will revise the “last updated” date above and, for material changes, provide additional notice.

12Contact

Privacy questions or requests: ops@arcanaoperations.com.