Privacy policy
Operating model
MonaxPay keeps the data needed for dashboard access, receipts, risk controls, and audit evidence while delegating card and provider identity data to approved providers.
Minimal application data
The app stores account, role, wallet, link, receipt, audit, and reconciliation records. Raw card data and provider-hosted identity documents are not stored in the app database by default.
Provider checks
Approved KYC/KYB, onramp, wallet-screening, and payment providers may process identity, payment, sanctions, fraud, and route data under their own approved controls.
Customer receipt access
Customers access receipts through email and access-code verification. Merchant operations and unrelated customer records are not exposed in the receipt vault.
Security controls
Production access requires signed sessions, TOTP step-up, CSRF protection, scoped API credentials, replay protection, audit logs, backup evidence, and readiness checks.