Privacy Policy

Bekena ("we", "our", or "us") operates a cryptocurrency payment gateway. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website (bekena.com), dashboard (app.bekena.com), or API services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please discontinue use of our services.

Account Registration: When you create a Bekena merchant account, we collect your name, email address, company name, business website, and country of operation.

KYC Information: For live (production) API access, we collect identity verification documents as required by our AML policy: government-issued ID, proof of business registration, and related compliance documentation.

API Usage: We log API requests including timestamps, endpoint paths, IP addresses, and response codes. We do not log request bodies except for error diagnostics.

Payment Data: We process blockchain transaction data (wallet addresses, transaction hashes, amounts, timestamps) necessary to detect and confirm payments. We do not store private keys or have custody of funds.

Usage Analytics: We collect anonymized analytics on website and dashboard usage (page views, session duration, feature usage) to improve our products.

We use collected information to:

• Provide, operate, and maintain our payment gateway services• Process and complete payment transactions on your behalf• Verify your identity and comply with AML/KYC regulations• Send transactional notifications (payment confirmations, API alerts)• Respond to support requests and communicate about your account• Detect, investigate, and prevent fraudulent or illegal activity• Comply with legal obligations and law enforcement requests• Improve our services and develop new features

We do not sell your personal information. We share information only:

Service Providers: With vetted third parties that help us operate our services (cloud hosting, email delivery, identity verification). These providers are contractually bound to use data only as instructed.

Legal Requirements: When required by law, court order, or governmental authority. We will notify you of such requests where legally permitted.

AML/Compliance: With AML screening providers as required to comply with anti-money laundering regulations. Transaction data may be screened against sanctions lists.

Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before such a transfer.

We retain your data for as long as your account is active and for the period required by applicable law. Specifically:

• Account data: Retained for the duration of the account plus 7 years for tax/accounting records• KYC documents: Retained for 5 years after account closure as required by AML regulations• Transaction logs: Retained for 7 years• API logs: Retained for 90 days for debugging and security purposes

You may request deletion of non-legally-required data by contacting [email protected].

We implement industry-standard security measures including:

• TLS encryption for all data in transit• AES-256 encryption for sensitive data at rest• API key hashing (we never store plaintext API keys)• Regular security audits and penetration testing• Access controls limiting data access to authorized personnel

No system is 100% secure. In the event of a breach affecting your data, we will notify you within 72 hours as required by applicable law.

Cryptocurrency transactions are recorded on public blockchains. Information you submit for payment (wallet addresses, transaction hashes) is inherently public and cannot be deleted by Bekena or any party.

Bekena does not control blockchain networks and cannot modify or delete on-chain data. Your use of the Bekena payment service results in on-chain records that are permanent and publicly visible.

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you• Correct inaccurate data• Request deletion of data not subject to legal retention requirements• Object to or restrict certain processing• Data portability (receive your data in machine-readable format)

To exercise any right, email [email protected]. We respond within 30 days. Identity verification may be required.

We use necessary cookies to operate our dashboard (session management, authentication). We use analytics cookies to understand usage patterns and improve our product.

You can disable cookies in your browser settings, but this may affect dashboard functionality. We do not use advertising or tracking cookies.

For privacy questions, data requests, or concerns:

Email: [email protected] Response time: Within 48 hours

For general inquiries: [email protected]