Privacy Policy

1. Introduction

KAMIYO (“we,” “our,” or “us”) operates x402 Infrastructure, a payment verification API. This Privacy Policy explains how we collect, use, and protect your information when you use our services. By accessing KAMIYO, you agree to the terms outlined in this policy.

2. Data Collection & Usage

We collect and process user data to provide API payment services and maintain platform functionality:

• Account information: Email address, username, and authentication credentials
• Payment information: Processed securely through Stripe (we do not store complete payment card details)
• Usage data: API requests, alert preferences, webhook configurations, and dashboard interactions
• Technical data: IP addresses, browser information, and device identifiers for security and analytics

3. How We Use Your Data

We use collected information to:

• Deliver payment notifications and API access confirmations
• Process API requests and maintain service uptime
• Manage subscriptions and billing through Stripe
• Improve platform features and user experience
• Ensure platform security and prevent abuse
• Communicate service updates and support

4. Data Storage & Retention

• Account data is retained while your account remains active
• API request logs are retained for 90 days for debugging and analytics
• Payment records are retained per Stripe's data retention policies and tax regulations
• Payment transaction data is retained per regulatory requirements and blockchain records
• You may request account deletion at any time, which removes personal data within 30 days

5. Data Sharing & Third-Party Services

We do not sell or share personal data. We share data only with:

• Stripe: For payment processing (subject to Stripe's privacy policy)
• Render.com: Our hosting infrastructure provider (subject to their security standards)
• Legal requirements: When required by law or to protect our legal rights
• Business transfers: In the event of a merger, acquisition, or sale of assets

6. International Data Transfers

Our platform operates on infrastructure located in the United States. If you access our services from outside the US, your data will be transferred to and processed in the United States. We comply with GDPR and applicable data protection regulations.

7. User Rights & Data Control

You have the right to:

• Access your personal data and request a copy
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data (right to be forgotten)
• Object to processing of your personal data
• Request data portability in machine-readable format
• Withdraw consent for data processing at any time

To exercise these rights, contact us at the email provided below.

8. Security Measures

We implement industry-standard security measures to protect your data:

• HTTPS/TLS encryption for all data transmission
• Encrypted database storage with access controls
• JWT-based authentication with secure token handling
• Rate limiting and abuse prevention systems
• Regular security audits and vulnerability assessments
• PCI DSS compliant logging practices for payment data

9. Cookies & Tracking Technologies

We use cookies and similar technologies for:

• Essential cookies: Required for authentication and platform functionality
• Analytics cookies: To understand platform usage and improve services
• Preference cookies: To remember your settings and preferences

You can control cookie preferences through your browser settings. Disabling essential cookies may impact platform functionality.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email to registered users. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Information

For privacy-related inquiries, data access requests, or to exercise your rights under this policy, contact us at: privacy@kamiyo.ai

Last updated: October 14, 2025