Privacy Policy

Last updated: 12 October 2026

Payment Control is an early-stage product run by Bharat Upadhya. This page explains what personal data we handle, why, and how you can ask us to see, change, or delete it. Questions: [email protected].

Visiting this website

This site is a static page. It has no sign-up forms, no advertising, and no analytics or tracking cookies. To deliver the page:

• our hosting provider, Cloudflare, processes your IP address and basic request data for security and delivery;
• fonts are loaded from Google Fonts, so Google receives your IP address when the page loads.

When you email us

If you email us, we keep your name, email address, and what you write so we can reply and continue the conversation. We do not sell it or use it for anything else.

Business outreach

We contact people who work in payment operations, treasury, finance, and engineering at companies that use stablecoin payments. For this we use business contact details: name, job title, company, and work email address. We find these in public sources such as company websites and news articles, and through business email-finding and verification services.

• We use this data only to send a small number of relevant business emails (an introduction and at most two follow-ups) and to keep a record of those messages.
• Our basis is legitimate interest in business-to-business communication.
• If you reply that you are not interested, or ask us to stop, we stop and keep only your email address on a do-not-contact list so we never email you again.

Design partners

Companies that join our design-partner program may share historical payment records with us for a reconciliation review. That data is handled under a separate written agreement with the company, used only for that review, and deleted when the agreement says.

Google user data

We use a Google OAuth app only to store our own encrypted backup files in our own Google Drive. It requests the narrow drive.file permission, so it can only see files it created. It does not access anyone else's Google data, and no Google user data is shared, sold, or used for advertising. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How we store and protect data

• Data is kept on a server we control in the EU (Hetzner) and in encrypted backups.
• Stored email content is encrypted, and access is limited to us.
• Service providers we rely on: Cloudflare (hosting), Zoho (email), Hetzner (servers), Google (encrypted backups), and email-verification services. They process data only to provide their service to us.

How long we keep it

Outreach and email records are kept while the conversation is relevant and deleted when no longer needed. Do-not-contact entries are kept so we can honour your request. Backups roll over within about a month.

Your rights

You can ask us to tell you what data we hold about you, correct it, delete it, or stop contacting you. Email [email protected] and we will reply within 30 days. If you are in the EU or UK, you can also complain to your data protection authority.

Changes

If this policy changes, we will update this page and the date above.