Privacy Policy

PayWithInstinct is operated personally by Carlos Gonzalez Juarez in Kazakhstan. Carlos Gonzalez Juarez is responsible for the personal information described in this policy. “We” and “us” refer to this operator, trading as PayWithInstinct.

This policy covers paywithinstinct.com, including account setup, agent connections and payment features.

For privacy questions or requests, contact human@paywithinstinct.com.

• Sign-in information. Google and our authentication provider, Supabase, process your Google account identifier, email address and basic profile information, such as your name and photo. We use the verified identifier and email to create or find your account. We do not receive your Google password or request access to Gmail, Drive files or contacts.
• Optional profile information. The name, email address and profile photo you choose to add. Profile email addresses are private; the name and photo you save can be publicly visible.
• Account and payment records. Your account and public profile IDs, account addresses, balance observations, payment amounts and recipients, approvals, spending limits, status, timestamps and transaction references.
• Agent connection information. Connection acknowledgements, payment instructions and payment requests submitted through the service. We do not receive your whole Instinct chat history through the connection process.
• Technical and support information. Network and browser request information processed by our hosting and authentication providers, security and error records, and information you send when contacting us. We use an IP-derived identifier to limit abusive requests.

We use information to sign you in, maintain your account, connect your agent, resolve recipients, create and process authorized payments, display balances and receipts, prevent abuse, investigate errors and respond to support or legal requests.

We use Google account information for sign-in and account administration. We do not sell personal information, use Google account data for advertising, or use it to train general-purpose AI models.

Where data-protection law requires a legal basis, we process information as needed to provide the service you request, protect the service and its users, meet legal obligations, or follow your consent where consent is required.

• Public profiles. Anyone with your public profile ID can look up the name and photo you have saved and whether the account is ready to receive. The public profile API does not disclose your email address.
• Agents and payment participants. Messages you copy or share include connection or payment instructions and relevant account references. Agents and recipients may receive the names, amounts, status and receipt information needed for their payment. Google sign-in credentials and owner session cookies are not included.
• Read-only links. A person or agent with a private payment-monitor or receipt link can read the information available through that link. Keep these links private; a monitor link grants read access, not payment approval.
• Funded invitations. Anyone holding a private invitation link can claim its money by signing in. We record the winning account and claim or delivery status. The link can reveal the sender’s displayed name and amount; it does not reveal the claimant’s email or sign-in credentials.
• Service providers. Google handles Google sign-in; Supabase provides authentication and database services; Vercel hosts the application and background jobs; Coinbase Developer Platform provides account and payment infrastructure. Blockchain node providers process requests needed to read and submit transactions. If you choose a funding provider, it may collect payment or identity information directly under its own terms.
• Legal and security needs. We may disclose information when required by law or reasonably necessary to address fraud, security incidents or protect legal rights.

Provider privacy information: Google, Supabase, Vercel and Coinbase. Providers and agents may process information outside your country.

Payments currently use blockchain infrastructure. Account addresses, transfer amounts and transaction records submitted to a public network can be visible to anyone and may be linked to other activity. Blockchain records can remain public indefinitely and generally cannot be changed or deleted by us.

Deleting an application account cannot erase records already published on a blockchain or copies held by recipients or independent agent providers.

We use essential cookies to maintain your signed-in session and secure login and setup flows. Browser storage also supports payment-request recovery, read-only status access and deposit-confirmation feedback.

The application currently includes no advertising trackers or third-party product-analytics integration. Hosting, authentication and payment providers still process operational information needed to deliver their services. Clearing browser storage can sign you out or remove local recovery information.

We retain account information while it is needed to provide your account. Payment, approval and security records may be retained afterward to reconcile activity, prevent abuse, resolve disputes or meet applicable legal obligations. Backups may retain information until they are replaced or expire.

We use access controls, authenticated sessions and encrypted connections to protect information. No online service can guarantee complete security.

You can edit your profile, remove your profile photo, sign out, revoke delegated spending and manage supported agent read access through the available account controls. You can also manage the app’s access in your Google Account settings; removing Google access does not itself erase our records.

Contact human@paywithinstinct.com to request access, correction, a copy of your information, account closure or deletion. Depending on applicable law, you may also have rights to restrict or object to processing, withdraw consent, or complain to a data-protection authority. We may need to verify account ownership and may retain records where lawful and necessary. We respond as required by applicable law.

Before requesting closure, contact us about any remaining balance or pending payments. Public blockchain records and information already shared with independent services remain subject to the limits described above.

The service is intended for adults aged 18 or over. If you believe a child has supplied personal information, contact us.

We update this page when our practices change and revise the date above. Material changes will be communicated through the service or another appropriate channel. See also our Terms of Service.