Privacy policy

• No accounts, no KYC, no analytics, no advertising and no tracking cookies.
• The site sets one cookie, and only if you switch language: it remembers English or Portuguese.
• Bank logins, statements, names and CPFs are never collected, today or after launch.
• We don't sell or rent data, and there's very little to share.

Request logs

Our hosting provider (Vercel) processes standard request data, including your IP address, to deliver pages and protect the site from abuse. We don't use it to identify you, and it's kept only for the provider's short log retention.

Language cookie

NEXT_LOCALE stores "en" or "pt" for one year when you pick a language, so the site opens in that language next time. It holds nothing else.

Fonts and images

Served from our own domain. Loading a page sends no requests to third parties.

Analytics

None. No analytics scripts, pixels, session recording or fingerprinting.

Links to X open X's site, which has its own privacy policy. Nothing is sent to X until you click.

If you open a support ticket or write to contact@notaramp.com, we receive your name, email address, topic and message. They're delivered to our inbox by our email providers, who store them on our behalf. We use them only to reply and to handle what you asked for, and we delete them on request.

To stop spam, the support form checks that your email's domain can receive mail and limits how many tickets can be sent. The limit uses a keyed hash of your IP address and email held in memory for at most 24 hours; the IP address itself is never stored.

Nothing below happens yet. It describes how the product is designed, and this policy will be updated before launch.

Proofs

Made on your phone from your own bank session. Your bank login, balance and other transactions stay on your phone. The notary that witnesses the session sees only encrypted traffic.

Payer ID

To set limits and stop fraud, the paying account's identifier is hashed with a secret key and kept off-chain. The underlying identifier is never stored.

On-chain data

Intents, fills, amounts, wallet addresses and hashes are written to Robinhood Chain. Blockchain data is public and permanent, and nobody, including us, can delete it.

The Pix itself

Your bank and the seller's bank process the payment. As with any Pix, the seller sees your name and part of your CPF, and you see theirs. That's handled by the banks, not by NOTA.

Fog Mode

Optional delivery to a fresh one-time address so the public can't link a fill to your main wallet. The seller and the banks can still match the payment to the fill.

On your device

Your activity history is encrypted and kept only in your browser. Clearing it deletes it for good.

Names, CPFs or other ID numbers, ID documents, selfies, bank credentials, bank statements, the raw inputs to a proof, and full Pix keys of buyers.

We don't sell, rent or trade personal data. Service providers that host the site and our email process data only to run those services for us. If we receive a lawful request, we can only hand over what we hold, which is very little.

Under Brazil's LGPD, the GDPR and similar laws, you can ask to access, correct, delete or export personal data we hold about you, and object to how it's used. Email contact@notaramp.com and we'll respond. Data written to the blockchain can't be changed or deleted by anyone.

You can also complain to Brazil's data protection authority (ANPD) or to your local authority.

NOTA is not meant for anyone under 18.

When this policy changes, the new version is posted here with its date. Significant changes will also be announced from @notaramp before they take effect.

Questions about privacy or your data: contact@notaramp.com.