Privacy Policy

Last updated October 20, 2026

This policy explains what information Verikou collects, how we use and share it, how long we keep it, and the choices and rights you have. It applies to verikou.com, the Verikou dashboard, the Verikou API, and the emails we send (together, the "Service"). Verikou is operated by the independent developer who owns and operates Verikou, based in California, USA ("Verikou", "we", "us"). Using the Service is also governed by our Terms of Service.

The short version

  • We collect what we need to run the Service: your account details, the payments and wallet addresses you ask us to monitor, and basic technical data used for security.
  • We never ask for, and never hold, your private keys, seed phrases, or funds.
  • We don't sell your information, and we don't use it for advertising. We don't use analytics or advertising trackers.
  • We share information only with the service providers that help us run Verikou, such as hosting, email delivery, and blockchain data providers.
  • Your payment history is kept for as long as your account is open. You can download it or delete your account at any time.

1. Information we collect

Information you give us.

  • Account information: your username, email address, and password. We store passwords only in hashed form, never in readable form. We also keep your plan, notification preferences, billing currency, and a record of when you accepted our Terms of Service.
  • Payments you create: amounts, currencies, sending and receiving wallet addresses, due dates, and any names, labels, notes, or other details you attach. This includes contact details for the other party to a payment, such as their name or email address, if you choose to provide them.
  • Saved wallets: wallet addresses and the nicknames you give them, including the wallet you pay Verikou's fees from.
  • Developer settings: API keys (stored only as a one-way hash), webhook endpoint URLs, and webhook signing secrets.
  • Support messages: whatever you include when you contact us.

Information we collect automatically.

  • Blockchain data about your payments: transaction hashes, amounts, confirmation counts, and timestamps that we observe on public blockchains for the addresses you ask us to monitor.
  • Webhook delivery logs: each event we send to your endpoints, including the payload, the response code, and any error.
  • Billing records: the fees we invoice you, their USD value, and the on-chain payments you make toward them.
  • Technical and security data: your IP address, browser type, the pages or API endpoints you request, and when. We use this to keep you signed in, enforce rate limits, prevent abuse, and fix problems.

What we don't collect. We never ask for your private keys, seed phrases, or wallet passwords, and you should never send them to us. We don't collect bank account or card details, government ID, or precise location. Verikou is non-custodial: we don't hold, move, or have access to your funds.

2. Information about people who aren't Verikou users

When you create a payment, you may give us information about the other party, such as their name, wallet address, or email address. We use it only to provide the Service to you. For example, at your request we email a payee a payment request and let them know when their payment is detected. You're responsible for having the right to share that person's information with us and for any messages you ask us to send them (see our Terms of Service).

If you received a message from Verikou about a payment and want your information removed, email support@verikou.com. We'll remove or restrict it, and we may let the Verikou user who entered it know.

3. How we use information

  • To provide the Service: monitoring the addresses and payments you set up, updating payment status, sending the notifications and webhooks you configure, and showing your history.
  • To bill you: calculating plan and usage fees, creating invoices, and matching the payments you make to them.
  • To keep Verikou secure and prevent abuse: authenticating you, enforcing rate limits and plan limits, detecting fraud, spam, and misuse, and protecting our infrastructure, our users, and others.
  • To communicate with you: service emails about your payments, account, billing, security, and changes to these policies. We don't send marketing email.
  • To maintain and improve the Service: diagnosing errors and understanding how the Service performs, mostly from aggregated information.
  • To meet legal obligations: keeping financial records, responding to lawful requests, and enforcing our Terms.

We don't sell personal information. We don't "share" it for cross-context behavioral advertising (as California law defines that term), and we don't use it to make decisions with legal or similarly significant effects about you through automated processing alone.

If the EU or UK General Data Protection Regulation applies to you, we process your information on these legal bases:

  • Contract: to provide the Service you signed up for, including monitoring, notifications, webhooks, and billing.
  • Legitimate interests: to secure the Service and prevent abuse, to send payment notifications to payees on our users' behalf, and to maintain and improve the Service. These interests don't override your rights; you can object (see Your choices and rights).
  • Legal obligation: to keep financial records and respond to lawful requests.
  • Consent: where we ask for it. You can withdraw consent at any time.

For the purposes of these laws, Verikou is the controller of your account information.

5. How we share information

We share information only as described here.

  • Service providers that process information on our behalf, under contracts that limit how they can use it:
    • DigitalOcean: hosting for our servers and database.
    • Brevo: email delivery. It receives recipients' email addresses and the content of the emails we send.
    • Infura and Helius: Ethereum, USDC, and Solana blockchain access. They receive the addresses and transactions we look up.
    • mempool.space and BlockCypher: Bitcoin blockchain data. They receive the addresses and transactions we look up.
    • CoinGecko: cryptocurrency exchange rates. It receives no personal information.
    • jsDelivr, unpkg, BootstrapCDN, and the jQuery CDN: they deliver some of the code and styles our pages use. Your browser contacts them directly when you load a page, so they receive your IP address and browser information.
    We also run our own blockchain nodes on hardware we control.
  • Destinations you choose: we send webhook events to the URLs you configure. If you name another Verikou user as the other party to a payment, we show that payment in their account too.
  • Anyone with a payment link: see Public blockchains and payment links.
  • Legal and safety reasons: when we believe in good faith that it's required by law or legal process, or needed to protect the rights, property, or safety of Verikou, our users, or others, including to investigate fraud, abuse, or violations of our Terms.
  • Business transfers: if Verikou is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that deal. The new owner must honor this policy or notify you of changes.
  • With your consent or at your direction.

6. Public blockchains and payment links

Blockchain transactions are public and permanent. Anyone can see the addresses, amounts, and timing of transactions on the networks Verikou supports, and that information can sometimes be linked to a person. Verikou reads this public data; we can't change or delete anything recorded on a blockchain.

Each payment has a shareable link. The link is hard to guess, but anyone who has it can see that payment's details, including the amount, currency, wallet addresses, and status. If a payee was named, the page also shows their Verikou username or a partly hidden version of their email address (for example, j•••@example.com). Share payment links only with people who should see those details.

7. Cookies and local storage

We use only the cookies needed to run the Service: a session cookie that keeps you signed in, and a security cookie that protects forms against cross-site request forgery. Your browser also stores your chosen display time zone locally, on your device. We don't use analytics, advertising, or cross-site tracking cookies. Because we don't track you across sites, we treat browser "Do Not Track" signals the same as normal browsing; there's no tracking to turn off.

8. Data retention

We keep information only as long as we need it for the purposes above, or as the law requires.

Payment history

Your payments and the transactions they've received are kept for as long as your account is open, on every plan. We don't delete payment history on a schedule, because many people need these records for tax and accounting purposes years after a payment happens. You can delete individual payments yourself, and you can download your full history at any time as a CSV file from the Account page. Information about a payee is kept with the payment it belongs to.

Webhook delivery logs

The Webhook Logs page records each event we've sent to your endpoints, including the full payload. Logs are kept for a period that depends on your plan:

PlanWebhook logs kept for
Free 7 days
Growth 30 days
Enterprise 90 days
Beta 90 days

Failed deliveries can be resent until they age out. Beta accounts move to the Free plan's window when beta ends. Deleting a webhook endpoint also deletes its delivery logs.

Billing records

Records of the subscription and usage fees we've billed you are part of your payment history while your account is open. We're required to keep our own financial records, so if your account is deleted we keep these fee records for 7 years from the date they were issued, with your email address and contact names removed. They are then deleted.

Technical logs

Our servers keep standard technical logs, such as IP addresses, requests, and errors, for security and troubleshooting. These logs are rotated and overwritten automatically, and we don't keep them long term. Rate-limiting and sign-in protection counters tied to an IP address expire on their own within an hour.

Closing your account

You can close your account from the Account page once any outstanding fees are settled. When you close it:

  • You're signed out and can't sign back in.
  • Your API keys and webhook endpoints are deleted immediately, and we stop monitoring your open payments.
  • Your account and all of its data are permanently deleted after 90 days. Until then, support can reopen it for you.
  • Billing records are kept as described above.

Download your payment history before closing your account. We can't recover it after deletion.

Backups

We take daily database backups for disaster recovery. Deleted data can remain in backups for up to 16 days after it's deleted from the live service. Backups are only used to recover from a system failure.

9. Security

We protect information with encryption in transit (HTTPS), hashed passwords and API keys, signed webhooks, access controls on our systems, and regular backups. No system is perfectly secure, so we can't guarantee the security of information you send us. Keep your password and API keys private, and contact us right away if you think your account has been compromised. To report a security vulnerability, email support@verikou.com.

10. Your choices and rights

You can do a lot of this yourself:

  • Access and export: download your payment history as CSV from the Account page.
  • Correct: edit your payments, wallets, and settings in the dashboard.
  • Delete: delete individual payments, or close your account from the Account page.

Depending on where you live, you may also have the right to access a copy of your personal information, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent. We honor these requests for all users, wherever they live. Email support@verikou.com from the address on your account. We may need to verify your identity, and we'll respond within the time the law requires (generally 30 to 45 days). Some information may have to be kept even after a deletion request, such as billing records we're legally required to keep. If you're in the EU or UK, you can also complain to your local data protection authority.

11. California privacy rights

If you live in California, you have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and not to be discriminated against for exercising these rights. Section 1 lists the categories we collect (identifiers, account and transaction information, and internet activity), and the sections above explain where they come from, why we use them, and who receives them. We don't sell or share personal information, and we don't use sensitive personal information for purposes that would give you a right to limit it. You can use an authorized agent to make a request; we may ask the agent for proof of authorization and ask you to verify your identity. California's "Shine the Light" law also lets you ask about disclosures to third parties for their direct marketing; we don't make such disclosures. To make a request, email support@verikou.com.

12. International transfers

Verikou is based in the United States, and our servers and most of our service providers are in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses offered by our service providers.

13. Children

Verikou is not for anyone under 18, and we don't knowingly collect information from children. If you believe a child has given us personal information, contact us and we'll delete it.

14. Changes to this policy

We may update this policy from time to time. We'll post the new version here and update the date at the top. If we make a material change, we'll also let you know by email or with a notice in the Service before the change takes effect.

15. Contact us

Questions or requests about this policy or your information: support@verikou.com.