Privacy Policy

Xylapay is the issuer of XRHY, a rhodium-backed Real World Asset token. Xylapay acts as the controller of personal data processed through this website. Privacy questions can be sent to privacy@xylapay.com.

• Information you submit voluntarily, such as your name, email address, organisation, and message when you contact us or request information.
• Technical data automatically generated when you visit, such as IP address, browser and device type, referring page, and pages viewed.
• Preference data needed to remember choices you make on the site.

We do not ask for wallet keys, seed phrases, or payment card details through this website, and you should never send them to us.

• To respond to enquiries and provide information you request about XRHY.
• To operate, secure, and improve the website and detect abuse or fraud.
• To meet legal, regulatory, and record-keeping obligations that apply to us.

Where required by law, we rely on your consent, our legitimate interest in operating this site, or compliance with a legal obligation as the basis for processing.

We do not sell personal data. We share it only with service providers that help us run this website — for example hosting, infrastructure, and email delivery — and only to the extent needed to deliver those services. Providers are bound by contractual confidentiality and security obligations. We may also disclose data where legally required.

The site uses only the storage necessary to operate and secure it, plus any analytics described in a cookie notice shown to you. If we introduce non-essential analytics or marketing cookies, we will request consent where the law requires it. Most browsers let you block or delete cookies; core parts of the site may then behave differently.

XRHY transactions are recorded on the Solana blockchain. Blockchain records are public, permanent, and outside Xylapay's control — we cannot edit or delete them. Wallet addresses and transaction history are not published by this website, but they are visible to anyone inspecting the chain.

We keep personal data only as long as needed for the purpose it was collected, and afterwards for as long as required by applicable legal, tax, or regulatory record-keeping rules. Enquiry correspondence is deleted once it is no longer needed and no retention obligation applies.

We use encryption in transit, access controls, and reputable infrastructure providers to protect data. No online service can be guaranteed completely secure; we do not claim any specific certification for this website.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. Send requests to privacy@xylapay.com; we may need to verify your identity before acting. You may also complain to your local data protection authority.

Our providers may process data in countries other than yours. Where required, we use appropriate safeguards for such transfers. This website is not directed to children, and we do not knowingly collect data from anyone under 18.

We may update this policy as the website or our practices change. The revision date at the top always reflects the current version, and material changes will be highlighted on this page.