S
SoliaPay← Back to Home

Privacy Policy

Last Updated: January 17, 2026Effective: January 17, 2026

1. Introduction

SoliaPay is a non-custodial technology interface. This Privacy Policy explains how we handle your data while strictly respecting the self-sovereign nature of your private keys and assets.

2. Non-Custodial Privacy Model

What We DO NOT Collect

Due to our non-custodial architecture powered by Turnkey:

  • We NEVER access or store your unencrypted Private Keys.
  • We NEVER access your unencrypted Seed Phrases.
  • We CANNOT decrypt your wallet credentials without your biometric/passkey authorization.

4. Data We Collect

While we minimize data collection, we require certain information to provide services and comply with regulations (MiCA, GDPR, AML):

4.1 Identity Data (KYC)

Required for fiat on-ramps and regulatory compliance: Name, ID documents, address. This data is securely processed by our identity verification partners.

4.2 On-Chain Data

Public Blockchain Data: Your wallet address and transaction history are public on the blockchain. We index this public data to show your transaction history in the app.

4.3 Authentication Metadata

To facilitate Passkey login, we store cryptographic public keys and authentication attestations (collected via Turnkey) that allow you to prove your identity.

5. Turnkey Infrastructure

We use Turnkey as our secure enclave provider.

How Data Flows to Turnkey:

When you create a wallet or sign a transaction, encrypted commands are sent directly to Turnkey's secure enclaves. Turnkey decrypts these commands inside a hardware-isolated environment to execute your request. Neither SoliaPay nor Turnkey personnel can see your private keys during this process.

11. Security Measures

We employ "Fortress-grade" security measures:

  • Secure Enclaves: Critical cryptographic operations occur in isolated hardware environments (TEE).
  • Biometric Authentication: Access relies on device-level biometrics (FaceID/TouchID) via WebAuthn.
  • No Central Honey Pot: Since we don't hold private keys, there is no central database of keys for hackers to target.

13. Contact Us

DPO: dpo@soliapay.com

Privacy Team: privacy@soliapay.com