Privacy Policy

1. Scope

This policy covers atexpay.com (including the docs), the seller dashboard at portal.atexpay.com, buyer checkout and order pages at pay.atexpay.com, the API, and our emails. It applies to sellers and buyers.

2. What we collect

• Account sign-up: your name, email address and a hashed password, plus ordinary abuse-prevention data such as a hashed IP for rate limiting.
• Seller accounts: sign-in details, business/profile details you enter at onboarding (including what you sell), your payout address, your uploaded branding, your products, and the files and links you deliver to buyers.
• Sales and orders: payment metadata needed to show the seller’s dashboard — amounts, fees, status, product, buyer name, email and billing address as provided at checkout, card brand and last four digits only — and each order’s delivery record.
• Checkout and delivery activity: when a buyer opens a checkout page, and when they visit their order page, download a delivered file or open a delivered link, we record the time, IP address (including the address a network proxy reports), browser identifier, language, referring page and approximate country. This is how a seller and AtexPay can show that an order was delivered and collected, and it helps prevent fraud and resolve disputes.
• API activity: when a seller's software calls our API, we record the call — the endpoint, the result, the time it took, the IP address, browser or server identifier and referring site.
• Technical: ordinary server logs and essential cookies (session, security). We run no third-party advertising trackers on our pages.

3. What we never collect

• Full card numbers: the payment form is served by our payment partner in an isolated frame; card data goes directly to it and never reaches AtexPay's servers.
• Identity documents: the photo-ID verification is run by the payment partner; your documents are submitted to it, not to us. We store only the resulting status (for example "approved").
• Your money: balances are held by the payment partner and its licensed financial partners; AtexPay holds no funds and no bank credentials.

4. How we use data

To run the service: creating and operating your account, opening and operating your seller account with the payment partner, rendering your dashboard, checkout and order pages, delivering orders, sending transactional email (verification, receipts, delivery emails, sign-in links), keeping delivery records, screening products against our prohibited list, preventing fraud and abuse, and meeting legal obligations. We do not sell personal data, and we do not use it for third-party marketing.

5. Who we share it with

• Our payment partner — Whop or PingPongX, depending on the seller’s region (see Payment partners) — and its financial partners: the details needed to open your seller account, verify you, process payments and send payouts, and delivery records where a dispute needs them.
• The seller you bought from — for buyers: your name, email, billing address, what you bought, and your order’s delivery record (including the checkout and download activity above), so the seller can deliver and support your order.
• Infrastructure providers — hosting, database and email delivery, bound to process data only for us.
• Authorities — where the law genuinely requires it.

6. Buyers

When you buy from a seller through an AtexPay checkout page, your card details go to our payment partner, not to AtexPay or the seller. The seller sees your name, email, billing address and what you bought so they can deliver it and handle support, and both the seller and AtexPay can see your order’s delivery record — when you opened the checkout and your order page, and when you downloaded or opened what was delivered, with the IP address, browser and approximate country of each. Receipts and delivery emails come by email; the card statement shows the seller’s name after the payment partner’s short prefix.

7. Retention

Account, sales and order records — including delivery records — are kept for as long as the seller’s account exists and afterwards only as long as tax, anti-fraud and dispute rules require. Files a seller delivers are deleted from our servers 15 days after delivery. Checkout activity that never led to a sale is deleted after 90 days.

8. Security

Traffic is encrypted in transit, secrets are stored hashed or encrypted, access is limited to what operating the service requires — and the most sensitive data (cards, IDs, funds) is kept out of our systems entirely by design.

9. Your choices

Email hello@atexpay.com to access, correct or delete your data; we act on requests within a reasonable time and within what the law lets us delete (sales and delivery records tied to payments may have to be retained). Depending on where you live you may also have statutory rights to portability, restriction and complaint to a supervisory authority.

10. Changes and contact

If this policy changes materially we will note it here and, for account holders, say so in the dashboard or by email. Questions: hello@atexpay.com.