Privacy Policy

1. What is stored

• Your account: name, email address and a hash of your password (never the password itself). API secret keys are stored encrypted.
• Sandbox records you create: payment intents, payouts, the ledger, webhook deliveries (including the response your endpoint returned) and the request body you sent to create each intent or payout, with the IP address and user agent it came from.
• Request log: for every request, the time, IP address, user agent, the route pattern (never the full URL, query string, body or headers) and the response status.

2. What is never stored

Card numbers, card security codes or bank credentials. FauxPay has no field that accepts them. Customer fields (name, email, phone) are meant for test data: do not send real people's details.

3. How long

• Request log rows are deleted after 30 days.
• The request body, IP address, user agent and customer fields recorded on intents and payouts are erased after 90 days; the record itself stays so your ledger still adds up.
• Your account and the rest of its sandbox records are kept until the account is deleted on request.

4. Who can see it

You, through your dashboard, and the operator of this installation, through the operator backoffice. It is not sold or shared with third parties. Email is sent through the operator's mail provider to deliver sign-up codes.

5. Your choices

You can revoke API keys and change your details from the dashboard. To have your account and its records deleted, or to ask what is stored about you, write to the contact address below.

Contact

The operator of this installation has not published a contact address yet.