BotPay is a decentralized payment processor operating on the Arc L2 blockchain network. Because we utilize smart contracts and non-custodial wallet signatures, we do not collect, hold, or sell your personal details, email addresses, or transaction logs.

1. On-Chain Ledger Transparency

All transactions, payment streams, registered bots, disputes, and reputation attestations executed on BotPay are recorded publicly on the Arc Network L2 blockchain ledger. This information is permanent, immutable, and accessible via blockchain explorers (such as Arcscan). By executing transactions, you acknowledge that your public wallet address and transaction data are public domain.

2. Off-Chain Logging & Webhooks

Our server-side webhook systems index and cache blockchain events to dispatch status updates (e.g. payment.authorized) to bot endpoints. This local cache contains public data (such as bot IDs, intent IDs, and amounts) and is only used to enable immediate webhook triggers.

3. Security & Cryptography

All communication with our APIs and webhooks is protected by standard HMAC cryptographic signatures. We utilize TLS encryption for all server endpoints, and we advise all developers to secure their private webhook keys carefully.

4. Updates to this Policy

We may update these guidelines periodically to reflect contract upgrades or regulatory alignment. Changes will be updated directly on this page.