HeyPay logo HeyPay Open app arrow_forward
Legal

Privacy Policy

eventLast updated: July 2, 2026 businessHeyPay — a product by Artisam Labs

This Privacy Policy explains how HeyPay ("we," "us," or "our"), a product operated by Artisam Labs, collects, uses, and protects information when you visit our website or use the HeyPay app to pay QRPH merchants from your Stellar (XLM) balance. By using HeyPay, you agree to the practices described here.

1Introduction

HeyPay is a service that lets you pay any QRPH merchant in the Philippines straight from your Stellar (XLM) balance. We are committed to protecting your privacy and being transparent about how your information — including financial and blockchain data — is handled. This policy covers our website, our app at app.heypayfi.xyz, and our browser extension.

2Information We Collect

We collect the following categories of information to provide the service:

  • Account information — your username, email, and password (stored as an argon2id hash). Used to create and secure your HeyPay account.
  • Wallet and blockchain data — your custodial Stellar wallet public key, XLM balances, deposit and payment transaction records, and on-chain Stellar transaction hashes.
  • Payment information — QRPH codes you scan, payment amounts in PHP and XLM, live rate quotes, and the full history of each payment's status (created, authorized, settled, failed, refunded).
  • Merchant information — for merchants: business name, QRPH code, and bank account details (encrypted at rest; only a masked last-4 is ever exposed).
  • Usage data — pages visited, time on site, browser type, device information, IP address, and referral source, collected via analytics.
  • Cookies — small files stored on your device to keep you signed in and to understand how the site is used.

3How We Use Your Information

We use your information to:

  1. Create and secure your account and session.
  2. Operate your custodial Stellar wallet and detect prefund deposits.
  3. Decode QRPH codes, quote live XLM→PHP rates, and process and settle your payments.
  4. Pay out settled PHP to a merchant's registered bank account via our payment rail.
  5. Respond to support inquiries and provide transaction status.
  6. Detect, prevent, and investigate fraudulent or unauthorized activity.
  7. Improve our website, app, and services, and comply with legal obligations.

4Sharing Your Information

We do not sell or rent your personal information. Sharing is limited to:

  • Service providers — vendors under confidentiality agreements, such as our payment-rail partner (PDAX) used to convert XLM to PHP and disburse payouts, our database and queue providers, and object-storage providers.
  • The Stellar network — on-chain transactions are by nature public on the Stellar ledger; wallet public keys and transaction hashes are visible on the network.
  • Legal authorities — when required by law, regulation, or legal process, including for anti-money-laundering (AML) and other regulatory obligations.

5Data Retention

We retain your information for as long as needed to provide the service and fulfill the purposes described here, or as required by law. Transaction and wallet records are retained to support payment reconciliation, dispute resolution, and regulatory compliance. You may request deletion of your account as described below, subject to records we are legally required to keep.

6Data Security

We apply technical and organizational safeguards to protect your information: passwords are hashed with argon2id, wallet secrets and bank account numbers are encrypted at rest with AES-256-GCM envelope encryption, sessions are server-side, and all mutating requests are protected by same-origin CSRF checks and security headers. No method of internet transmission or storage is completely secure, but we work to protect your information using commercially acceptable means.

warning

Blockchain note: Transactions on the Stellar network are public and irreversible. Information you submit on-chain — such as wallet addresses and transaction amounts — cannot be deleted or altered once confirmed.

7Cookies

We use three types of cookies:

  • Essential — required for the site to function, such as keeping you signed in and maintaining your session.
  • Analytics — help us understand how visitors use the site so we can improve it.
  • Preference — remember your settings, such as your cookie consent choice.

You can manage or disable cookies through your browser controls. Disabling essential cookies may affect your ability to use the app.

8Your Rights

You may:

  • Access, correct, or request deletion of the personal information we hold about you.
  • Withdraw consent for optional processing, such as marketing or analytics cookies.
  • Opt out of marketing communications at any time.
  • Request a copy of your data in a portable format, where applicable.

To exercise any of these rights, contact us at the email below. We will respond within a reasonable timeframe and in line with applicable law.

9Third-Party Links

Our website may link to external sites — such as Stellar, PDAX, or our parent company — that we do not control. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies.

10Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of HeyPay after changes are posted constitutes acceptance of the updated policy.

11Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us.

Email: heypay@artisam.xyz

Website: app.heypayfi.xyz

Operator: Artisam Labs — artisam.xyz