Non-custodial by default. The least data required. Every rule that matters lives in the contract.
Read-only, scoped to merchant and amount. Revocable from the app or your bank at any time.
Non-custodial. Sweeps execute from a contract you authorize with a weekly cap.
Public and versioned. Changes are reviewed and take effect the following sweep.
Security issues go to the security alias at the project domain. We respond within 48 hours.