Privacy Policy

Effective Date: February 15, 2026

1. Introduction

Welcome to Pay Lobster. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Services.

Pay Lobster is built on blockchain technology, which means many interactions are publicly visible and immutable. We believe in transparency and want you to understand what data we collect and how we use it.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Blockchain Data (Public)

When you interact with Pay Lobster smart contracts on Base L2, the following information is recorded on the blockchain:

  • Wallet Addresses: Your public wallet address(es)
  • Transaction Data: All transactions, including escrow creates/releases, token swaps, bridge transfers, amounts, recipients, timestamps, and smart contract interactions
  • Reputation Data: Reputation scores, trust tiers (Bronze/Silver/Gold/Diamond), ratings, and dispute history
  • Agent Identity: Agent names, capabilities, URIs, and metadata you register via the Identity contract (ERC-721)
  • Credit Data: Credit scores and lending activity
  • Spending Mandates: Pre-authorized spending limits and usage

This data is publicly visible on the blockchain and cannot be deleted or modified. Anyone can view this information using blockchain explorers like Basescan.

2.2 Optional Account Information

If you choose to create an account or subscribe to notifications, we may collect:

  • Email Address: For notifications, account recovery, and important updates
  • Display Name: Optional name for your profile
  • Notification Preferences: Your preferences for alerts and communications

2.3 Usage Data

We automatically collect certain information when you use our Services:

  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, pages viewed, referring URLs
  • Analytics: Usage patterns, feature engagement, and performance metrics

2.4 Cookies and Tracking

We use cookies and similar tracking technologies for:

  • Analytics (understanding how you use our Services)
  • Session management (keeping you logged in)
  • Preferences (remembering your settings)

3. What We DON'T Collect

Pay Lobster is designed with privacy in mind. We do NOT collect:

  • Private Keys: We never have access to your wallet's private keys or seed phrases
  • Personal Identity: No government IDs, passports, driver's licenses, or identity verification (unless required by law for specific services)
  • Financial Account Information: No bank account numbers, credit card details, or traditional payment information
  • Social Security Numbers: We never request SSNs or equivalent national identifiers
  • Biometric Data: No fingerprints, facial recognition, or biometric identifiers
  • Location Tracking: We do not track your precise geolocation

4. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the Services
  • Process transactions and execute smart contract interactions
  • Send notifications about escrow status, payments, and important updates
  • Analyze usage patterns to improve user experience
  • Detect and prevent fraud, abuse, and security threats
  • Comply with legal obligations and enforce our Terms of Service
  • Communicate with you about the Services (if you've provided contact information)

5. Blockchain Transparency Disclaimer

All on-chain data is inherently public and permanent.

Blockchain technology is transparent by design. When you use Pay Lobster smart contracts:

  • Your wallet address and transactions are visible to anyone
  • Transaction history cannot be deleted or hidden
  • Smart contract interactions are recorded forever on the Base blockchain
  • Anyone can analyze on-chain data to infer patterns, relationships, or behavior

This is a fundamental characteristic of public blockchains and cannot be changed by Pay Lobster or any other party.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

6.1 Third-Party Service Providers

We work with third-party providers to operate our Services:

  • RPC Providers: We use Base RPC nodes (PublicNode) to interact with the blockchain
  • Wallet Providers: RainbowKit, WalletConnect, and other wallet connection services
  • Swap/Bridge Providers: 0x Protocol (token swaps) and Li.Fi (cross-chain bridges)
  • Fiat On-Ramp: Coinbase Onramp for fiat-to-crypto conversions
  • Authentication: Firebase Authentication for account management
  • Analytics: Vercel Analytics (anonymized)
  • Hosting: Vercel for web infrastructure

6.2 Legal Requirements

We may disclose information if required by law, legal process, or government request, including:

  • Compliance with subpoenas, court orders, or legal investigations
  • Protection of our rights, property, or safety
  • Prevention of fraud or illegal activities

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity.

7. Data Retention

On-Chain Data: Blockchain data is permanent and cannot be deleted.

Off-Chain Data: We retain optional account information (like email addresses) for as long as your account is active or as needed to provide Services. You can request deletion of off-chain data by contacting us at privacy@paylobster.com.

We may retain certain information for longer periods if required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

8. Security

We implement reasonable security measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure hosting infrastructure
  • Regular security audits of smart contracts
  • Access controls and authentication

However, no method of transmission or storage is 100% secure. You are responsible for securing your wallet and private keys. Pay Lobster cannot recover lost or stolen funds.

9. Your Rights and Choices

9.1 Access and Correction

You can access and update your account information at any time through your account settings.

9.2 Data Deletion

You can request deletion of off-chain data (like your email address) by contacting us. Note that on-chain data cannot be deleted.

9.3 Opt-Out of Communications

You can unsubscribe from marketing emails using the unsubscribe link or by updating your notification preferences.

9.4 Cookies

You can control cookies through your browser settings. Disabling cookies may affect functionality of the Services.

10. GDPR and CCPA Compliance

10.1 GDPR (EU Users)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including:

  • Right to access your personal data
  • Right to correct inaccurate data
  • Right to erasure ("right to be forgotten") — limited to off-chain data
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

10.2 CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

  • Right to know what personal information we collect
  • Right to delete personal information (off-chain data only)
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at privacy@paylobster.com.

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Users

Pay Lobster is operated from the United States. If you are accessing the Services from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website with a new "Effective Date"
  • Sending an email notification (if you have provided an email address)
  • Displaying a prominent notice on our website

Your continued use of the Services after the effective date constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@paylobster.com
Last Updated: February 15, 2026