YAYO Store collects only the information reasonably needed to operate accounts, orders, digital delivery and crypto payment verification. This Policy explains what the application stores and why.
1. Information we collect
Account data may include your name, email address, password hash, account timestamps and session records. Passwords are not stored in plain text.
Order data may include products purchased, prices, order status, timestamps, delivered inventory references and the delivered value required to make past purchases re-viewable to the account holder.
Payment data may include network, receiving address, exact requested amount, transaction hash, sending address when available on-chain, detected amount, confirmation count, payment status and related timestamps.
2. What we do not collect
The store does not need your crypto private keys, seed phrase, wallet password, card number, bank password, or private signing credentials. Never provide those secrets to the store or to anyone claiming they are required for payment verification.
3. How we use information
Information is used to authenticate your account, create and manage orders, reserve inventory, verify blockchain payments, prevent duplicate transaction use, deliver digital goods, provide order history, support downloads, investigate payment issues and protect the store from abuse.
4. Sessions, cookies and local storage
The store uses an essential session cookie to keep you signed in. The application also uses local browser storage for preferences such as language selection. These mechanisms are used for core functionality, not advertising profiles.
5. Blockchain and infrastructure data
Public blockchain transaction data used for payment verification is inherently public. The store may query blockchain infrastructure providers to verify transfers, confirmations and block timestamps.
Web servers and infrastructure providers may temporarily process basic technical request data such as IP address, timestamps and error logs for security, reliability and troubleshooting, even when the application does not build advertising or cross-site tracking profiles.
6. Data retention
Account, order, delivery and payment records may be retained while your account is active and for as long as reasonably necessary to provide purchase history, prevent duplicate transaction use, handle disputes, maintain security records and meet legal obligations.
Deleting an account may remove access to previously delivered digital goods. Some payment, transaction or order records may need to be retained where required for security, fraud prevention, accounting or legal compliance.
7. Sharing and disclosure
The store does not sell personal information for advertising. Data may be processed by hosting, network, security or blockchain infrastructure providers only to the extent needed to operate the service, verify payments, secure the application or comply with lawful requests.
8. Security
Reasonable technical and organizational measures are used to protect stored data, including hashed passwords and server-side sessions. No internet service can guarantee absolute security, so you should use a unique password and protect your email and devices.
9. Your choices
You can change your password from your account profile and can stop using the service at any time. Requests concerning account data can be handled through the support method made available by the store operator.