Privacy Policy

Last updated: March 24, 2026

LF Pay ("we," "us," or "our"), a product of LF Labs, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the LF Pay payment gateway service, website, APIs, and related services (collectively, the "Service").

1. Information We Collect

1.1 Account Information

When you register as a merchant, we collect your business name, contact person name, email address, Telegram handle, business type, website URL, and country of operation.

1.2 Financial Information

To enable fiat settlement, we collect bank account details including bank name, account number/IBAN, SWIFT/BIC code, and settlement currency preference. We also collect $LF token staking amounts for tier qualification purposes.

1.3 Transaction Data

We process and store transaction records including payment amounts, cryptocurrency types, wallet addresses, transaction hashes, timestamps, settlement amounts, and customer cashback distributions.

1.4 Technical Data

We automatically collect IP addresses, browser type and version, device identifiers, API request logs, webhook delivery logs, and usage analytics to maintain and improve the Service.

1.5 Customer Data

When end-users (your customers) make payments through LF Pay, we process their wallet addresses and transaction data. We do not collect personal identification information from your customers unless required for compliance purposes.

2. How We Use Your Information

We use collected information to:

  • Process crypto-to-fiat payment transactions and settlements
  • Calculate and distribute $LF cashback rewards to customers
  • Execute $LF buyback-and-burn from gateway fee revenue (35% Phase 1)
  • Verify merchant tier eligibility based on $LF staking
  • Provide merchant dashboard analytics and reporting
  • Send transaction notifications, settlement confirmations, and service updates
  • Detect and prevent fraud, unauthorized access, and illegal activity
  • Comply with applicable laws, regulations, and legal processes
  • Improve, maintain, and optimize the Service

3. How We Share Your Information

We may share your information with:

  • LF Swap Aggregator: Transaction data necessary for crypto-to-fiat conversion via the LF Swap DEX aggregation engine
  • Banking Partners: Settlement information required to process fiat withdrawals to your bank account
  • Blockchain Networks: Wallet addresses and transaction data are inherently public on the blockchain
  • LF Labs Ecosystem: Aggregated, anonymized data may be shared within the LF Labs product suite for analytics
  • Legal Authorities: When required by law, regulation, or valid legal process
  • Service Providers: Third-party vendors who assist in operating the Service (hosting, analytics, security)

We do not sell your personal information to third parties.

4. Data Retention

We retain merchant account data for as long as your account is active plus 5 years after account closure for legal and tax compliance. Transaction records are retained for 7 years in accordance with financial record-keeping requirements. Technical logs are retained for 90 days. You may request deletion of your personal data subject to our legal retention obligations.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3) and at rest (AES-256), multi-factor authentication, IP whitelisting for API access, regular security audits (CertiK-audited smart contracts), penetration testing, and access controls based on the principle of least privilege.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, port your data to another service, object to or restrict certain processing, and withdraw consent where processing is consent-based. To exercise these rights, contact us at privacy@lflabs.fund.

7. International Transfers

Your information may be transferred to and processed in countries other than your own. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance.

10. Contact Us

For privacy-related inquiries:
Email: privacy@lflabs.fund
General: support@lflabs.fund
Website: lflabs.fund