隐私政策Privacy policy
支付业务的本质是受托处理资金与数据。本政策说明我们在商户准入、交易处理、风控与支持服务中如何收集、使用、共享与保护信息。Payments are, at their core, the entrusted handling of money and data. This policy explains how we collect, use, share and protect information across onboarding, transaction processing, risk and support.
1. 适用范围Scope
本政策适用于 Apex Payment 官网及我们向商户提供的代收、代付、余额与结算服务。当你访问本网站、注册商户账号或通过 API 使用服务时，即适用本政策。商户与其终端用户之间的关系，由商户自行与其用户约定；除依法要求外，我们不直接面向商户的终端用户提供服务。This policy applies to the Apex Payment website and the collection, payout, balance and settlement services we provide to merchants — covering site visits, merchant registration and API usage. The relationship between a merchant and its end users is governed by the merchant's own terms; we do not serve merchant end users directly except as required by law.
2. 我们收集的信息Information we collect
- 账户信息：注册人姓名、企业邮箱、联系电话、登录凭据（仅存加密摘要）。Account data: registrant name, business e-mail, phone, and credentials (stored as encrypted digests).
- 商户尽调（KYB）资料：营业执照、注册编号、受益所有人信息、业务模式与预计交易量。KYB data: incorporation documents, registration numbers, beneficial-ownership information, business model and expected volume.
- 交易数据：订单、退款、代付、提现请求、收款人档案与账本分录。Transaction data: orders, refunds, payouts, withdrawal requests, recipient profiles and ledger entries.
- 技术与日志数据：API 请求日志（含 IP、request_id）、操作审计记录与网站访问日志。Technical data: API request logs (IP, requestId), operational audit records and site access logs.
- 通讯数据：工单、邮件与业务往来记录。Communications: tickets, e-mails and business correspondence.
3. 我们如何使用信息How we use information
用于：提供并改进服务（处理订单、记账、对账）；商户准入与持续尽调（KYB/AML、制裁与风险筛查）；安全与反欺诈（含 USDT 提现地址白名单与链上风险筛查）；履行法律义务（记录保存、可疑交易报告）；以及与服务运营直接相关的通知（如通道变更、对账差异）。To provide and improve services (orders, ledger, reconciliation); run onboarding and ongoing due diligence (KYB/AML, sanctions and risk screening); maintain security and anti-fraud controls (including withdrawal whitelists and on-chain screening); meet legal obligations (record-keeping, suspicious-activity reporting); and send service-operation notices such as channel changes or reconciliation alerts.
4. 共享与披露Sharing and disclosure
我们仅在以下情形共享信息：（1）为完成收款与代付而与上游通道及金融机构共享必要数据；（2）为合规目的向监管机构、司法机关依法提供；（3）与受合同约束的服务商（如云基础设施）处理；（4）在尽职调查流程中，经你同意向潜在合作方提供经核实的牌照与注册信息。我们不向第三方出售数据。We share data only to: complete collections and payouts with upstream channels and financial institutions; comply with lawful requests from regulators and authorities; process via contractually bound providers (e.g. cloud infrastructure); and, with your consent, provide verified licence and registration details to parties in due-diligence processes. We never sell data.
5. 跨境数据传输Cross-border transfers
多国家支付服务意味着数据可能在服务运营所在的多个辖区之间传输。我们以合同、加密与访问控制等适当措施保护传输中的数据，并遵循适用法律对跨境传输的要求。Multi-country payments mean data may move among the jurisdictions where we operate. We protect data in transit with contractual, encryption and access-control measures and follow applicable cross-border transfer laws.
6. 保留期限Retention
交易与账本数据按支付监管与会计要求的期限保留；KYB 与 AML 相关记录按适用的记录保存义务保留；日志数据按运维需要保留并在到期后删除或匿名化。Transaction and ledger data are retained per payment-regulatory and accounting requirements; KYB and AML records per applicable record-keeping duties; logs per operational need, then deleted or anonymised.
7. 数据安全Security
我们采用传输加密、密钥管理、最小权限访问与操作审计日志等措施保护数据；API Key 仅存哈希，Webhook 全程验签。发现影响你数据的安全事件时，我们会按适用法律及时通知。We protect data with encryption in transit, key management, least-privilege access and audit logging; API keys are stored only as hashes and webhooks are signature-verified. If an incident affects your data, we notify you as required by applicable law.
8. Cookies 与本地存储Cookies and local storage
本官网仅使用浏览器本地存储（localStorage）记住你选择的语言（中/EN），不使用广告追踪 Cookie。商户后台的会话令牌存储在其自身的安全策略之下。This website uses browser local storage only to remember your language choice (zh/EN) and sets no advertising cookies. Dashboard session tokens follow the dashboard's own security policy.
9. 你的权利Your rights
根据适用法律，你可能有权访问、更正、导出或删除与你相关的数据，或限制/反对某些处理。行使权利请邮件联系 compliance@apexpayment.com；我们将在核实身份后于合理期限内响应。注意：支付与 AML 法律要求的记录保存义务可能限制某些删除请求的执行范围。Subject to applicable law, you may request access, correction, export or deletion of your data, or restriction of certain processing — e-mail compliance@apexpayment.com and we will respond within a reasonable period after identity verification. Note that payment and AML record-keeping duties may limit the scope of deletion.
10. 政策变更Changes to this policy
政策发生重大变更时，我们会更新本页的「最后更新」日期，并通过后台公告或邮件通知商户。For material changes we update the last-updated date and notify merchants via dashboard announcements or e-mail.
11. 联系我们Contact
隐私事务请联系：compliance@apexpayment.com。办公地址见「关于我们」页的公司注册信息。For privacy matters contact compliance@apexpayment.com. Our office address is listed under company registration on the About page.