AroPay Sandbox Data Privacy Terms

The AroPay Sandbox (the “Sandbox”) is operated by Aro Media Inc. (“Aro Media”, “we”, “us”) so invited testers can evaluate AroPay’s confidential payment rail through the dashboard and the API. These terms explain what data the Sandbox collects, why, who it is shared with and the choices you have.

They apply to your account, every wallet you create or register in it, and every transaction you make, whether in the dashboard or with an API key.

• Account details: your email address, name and company, entered by the administrator who invited you, and any changes you make to them.
• Sign-in and security data: your password (stored only as a salted hash), two-factor secrets (encrypted), passkey public keys and device names, API keys (stored only as a hash and a short prefix), sign-in times and failed sign-in attempts. Your IP address is used in memory to rate-limit requests and protect your account.
• Wallet data: the addresses and labels of wallets you create or register, and for custodial wallets the private keys we generate and hold for you (encrypted).
• Transaction data: every fund, mint, transfer, redeem and Aro Mail request, with its amount, sender and recipient addresses, transaction hashes, status and any error. Amounts are recorded in clear, including for private transfers.
• Aro Mail data: each letter’s recipient name and postal address, your memo, and its claim code (encrypted).
• Consent record: the version of these terms you accepted, when, and the IP address and browser user agent you accepted from.

• To run the Sandbox: signing you in, executing and tracking your transactions, showing balances and receipts, and printing and mailing Aro Mail letters.
• To keep it secure: rate limits, account lockouts, preventing abuse and investigating incidents.
• To support you and improve AroPay: answering your questions, diagnosing failed transactions and understanding how the product is used during the test programme.
• We do not sell your data or use it for advertising.

• cAROUSD balances and private-transfer amounts are encrypted on-chain with fully homomorphic encryption (FHE), so the public cannot read them.
• Wallet addresses, transaction hashes and timing are always public. Public stablecoin transfers, test-fund top-ups, deposits and redemption payouts are public in full, amounts included.
• Aro Media can see more than the public: we hold the keys of custodial wallets, can decrypt their balances, and keep amounts in clear in our records so the Sandbox can operate and support you.

Custodial wallets are generated and held by Aro Media. Their private keys are encrypted at rest (AES-256-GCM) and decrypted on our servers only to sign and verify the transactions you request (including the automatic refund of an Aro Mail letter that expires), read your balances and export the key when you ask for it.

You can export a custodial key at any time as a passphrase-protected .nota file; once exported, keeping it safe is your responsibility. External wallets are watch-only: we store their address and label, never their keys.

• Public blockchains: transactions are broadcast to Ethereum (Mainnet in production, the Sepolia test network in staging). What is written there is public and permanent, and cannot be deleted by us or anyone else.
• Zama, whose relayer service performs the FHE encryption and decryption requests for confidential balances and transfers.
• Blockchain infrastructure providers (RPC nodes such as QuickNode) that relay our reads and transactions to the network.
• Lob, when you mail an Aro Mail letter: Lob receives the letter to print and deliver it, which includes the recipient’s name and postal address, your sender name and wallet address, the memo, the amount unless sealed, and the claim code and QR code.
• Hosting providers that run our servers and database on our behalf.
• Authorities or other parties when the law requires it, or to protect the Sandbox, its users or the public.

• The Sandbox is an evaluation environment. Do not use it to store personal data you do not need to.
• Only enter a recipient’s name and postal address in Aro Mail if you may share them with us and Lob to deliver the letter. Keep sensitive data out of memos: they are printed on the letter even when the amount is sealed.
• Keep your password, two-factor device, API keys, exported keys and claim codes safe. Anyone with a Sandbox account and a letter’s claim code can claim it.

We keep account, wallet, transaction and letter records while your account exists and the test programme runs, and afterwards for as long as we need them for security, audit, accounting or legal reasons. Letter records are kept after a letter is claimed, voided or expires. Blockchain data is permanent.

Passwords are stored as salted scrypt hashes; private keys, two-factor secrets and claim codes are encrypted with AES-256-GCM; API keys are stored only as hashes; sign-in sessions use HTTP-only cookies that expire after 24 hours. You can add two-factor authentication and passkeys in Settings. No system is perfectly secure: report anything suspicious to support@aro.media.

In Settings you can update your profile, manage two-factor authentication, passkeys and API keys, and export custodial keys from the Wallets page. Email support@aro.media to ask for a copy of your data, to correct it, or to deactivate your account and delete off-chain personal data we no longer need to keep. Data-protection laws where you are may give you further rights; contact us to exercise them.

When we change these terms we publish a new version with a new effective date, and you will be asked to accept it before your next transaction. The current version is always available at /terms on the Sandbox site.

By accepting you confirm that you have read these terms and agree to Aro Media processing your data as described here. You must accept the current version before you can fund, mint, transfer or redeem, or create, mail or claim Aro Mail letters, in the dashboard or through the API. Without accepting you can still sign in, view your account and void letters.

Questions: support@aro.media.