Privacy Policy
Last updated: 30 October 2026
1. Who we are
StablecoinPayments.io is run by Outrun Advisory FlexCo, which is the controller of your personal data under the EU General Data Protection Regulation (GDPR).
Outrun Advisory FlexCo
Lerchenfelder Str. 74 2/1
1080 Wien, Austria
Company register number: FN 628338 b, Commercial Court Vienna
Email: privacy@stablecoinpayments.io
We have not appointed a data protection officer, as the law does not require one for our processing. Write to the address above with any question about this policy or your data.
This policy covers stablecoinpayments.io, its accounts, newsletter and the services described below. Outrun Advisory's own website, outrun.at, has its own privacy policy.
2. The short version
- You can search and browse without an account. We do not use advertising or tracking cookies.
- If you create a free account, we use your details to run the account and, only if you agree, to send our newsletter.
- We pass your details to a provider only when you ask us to introduce you to that provider.
- We never sell personal data. Payments from providers never buy access to buyers' data.
- Our servers are in the EU. Where a service provider outside the EU is involved, we say so below.
- You can ask us at any time to show, correct, export or delete your data.
3. What we collect and why
We collect only what each part of the site needs. The table shows each activity, the data involved and the legal basis under Art. 6(1) GDPR.
| When you | Data | Why | Legal basis |
|---|---|---|---|
| Visit the site | IP address, date and time, page requested, browser and device type, referring page | To deliver pages, keep the site secure and fix errors | Legitimate interest (f) |
| Are counted in our statistics | Pages viewed, referrer, country, device type, counted with Umami on our own server, with no cookies and no profile of you | To understand which pages are useful | Legitimate interest (f) |
| Search or use "Ask which fits" | The text of your query, the results shown | To answer your query; to improve search, stored without your account or IP | Contract (b) for the answer; legitimate interest (f) for improvement |
| Create an account | Name, email, company, role, password or sign-in token, account settings | To run your account and unlock contact, introductions and reports | Contract (b) |
| Sign in with Google or LinkedIn | Name, email and profile ID passed by that provider | To sign you in without a separate password | Contract (b) |
| Ask for an introduction or contact a provider | Your account details, your message, the provider chosen | To pass your enquiry to that provider | Contract (b), at your request |
| Ask Outrun's experts for advice | Your account details, your message, notes of our conversation | To answer and advise you | Contract (b) or steps you ask for before one (b) |
| Send a brief with "Brief us" | What you need to move, the monthly volume you choose, your work email, the page you sent it from | To have a payments expert at Outrun reply and suggest providers that fit | Steps you ask for before a contract (b) |
| Subscribe to the newsletter | Email, name, sign-up date and confirmation | To send news about the site and Outrun Advisory | Consent (a), withdrawable any time |
| Claim a provider profile | Name, work email on the company's domain, role, proof of control, corrections you submit | To verify you speak for the company and to handle corrections | Contract (b); legitimate interest (f) in accurate listings |
| Write a review | Name or display name, company, the review, evidence that you are a customer | To publish verified reviews and handle a provider's reply | Contract (b); legitimate interest (f) in verifying reviews |
| Write to us | Your message and contact details | To answer you | Legitimate interest (f) or contract (b) |
Search and AI answers
Natural-language search and "Ask which fits" send your query to Anthropic's Claude API to produce an answer. Please don't type personal details into the search box. We keep queries to improve search, separated from your account and IP address.
Briefs to Outrun's experts
When you send a brief with "Brief us", we store it on our own server in Germany. Outrun's payments experts read it in our admin and reply to your work email. Our team gets a notice in Slack that a new brief has arrived; that notice contains none of your details. We do not pass your brief to a provider unless you ask us to introduce you to one. We do not store your IP address with the brief.
Introductions to providers
We pass your details to a provider only after you ask for an introduction or send an enquiry to that provider. The provider then handles your data under its own privacy policy. A provider may pay us a fee for the introduction. That fee never changes a provider's rank, score, inclusion or filter results.
People named in provider profiles
Provider profiles hold facts about companies. Some facts name people, such as founders, directors or the holders of a licence, taken from regulator registers, company registers and the provider's own website. We use this to give buyers verified information about who runs a provider (legitimate interest, Art. 6(1)(f)). If you are named and want something corrected or removed, write to us. Section 7 explains your rights, including the right to object.
What we don't do
We do not sell personal data, show advertising, build advertising profiles or process special categories of data (such as health or religion). Nothing on the site makes decisions about you by automated means that have legal or similarly significant effects (Art. 22 GDPR). Provider scores rate companies, not people.
4. Cookies
We use only cookies that the site needs to work, so we don't ask for cookie consent. Austrian law (§ 165(3) TKG 2021) allows these without consent.
| Cookie | Purpose | Lasts |
|---|---|---|
| Session cookie | Keeps you signed in | Until you sign out, or after 30 days |
| Security cookie | Protects forms against cross-site request forgery | Session |
Our statistics run without cookies or other identifiers stored on your device. If we ever add a cookie that isn't strictly needed, we will ask for your consent first and update this table.
5. Who receives your data
We share personal data only with the service providers below, who process it on our instructions under a data processing agreement (Art. 28 GDPR), and with the parties named after the table.
| Service provider | What they do for us | Where data is processed | Safeguard for transfers |
|---|---|---|---|
| Hetzner Online GmbH | Hosts our servers, database, statistics and newsletter sending | Germany | Inside the EU |
| Cloudflare, Inc. | DNS and network protection; all traffic to the site passes through Cloudflare, which sees IP addresses | USA and global network | EU-US Data Privacy Framework and standard contractual clauses |
| Anthropic | Produces AI answers to search queries | USA | Standard contractual clauses |
| Google (Google Workspace) | Our email, so your messages to us | EU and USA | EU-US Data Privacy Framework and standard contractual clauses |
Others who may receive your data:
- Providers you ask to be introduced to. They become responsible for your data under their own privacy policy.
- Sign-in providers (Google and LinkedIn) when you choose to sign in with them. They act under their own privacy policies.
- Our tax advisers, auditors and lawyers, who are bound to confidentiality, where needed.
- Authorities and courts, only where the law requires it.
Where data leaves the European Economic Area, we rely on an EU adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards.
6. How long we keep data
We delete data once we no longer need it, unless the law requires us to keep it.
| Data | Kept for |
|---|---|
| Server logs with IP addresses | 30 days, longer only to investigate a specific attack |
| Statistics | Without personal data, so no limit |
| Search queries | Separated from account and IP at once, then kept without a fixed limit |
| Account data | Until you ask us to delete your account. Accounts unused for 24 months are deleted after an email warning |
| Introductions, enquiries, briefs and expert conversations | 3 years after the last contact, the general limitation period for claims in Austria |
| Newsletter | Until you unsubscribe; proof of your consent for 3 years after that |
| Provider claims and corrections | As long as the claim is active, then 3 years |
| Reviews | As long as the review is published; proof that you are a customer is deleted once checked |
| Invoices and accounting records | 7 years, as Austrian tax law (§ 132 BAO) requires |
7. Your rights
You can use these rights at any time by writing to privacy@stablecoinpayments.io. We answer within one month and may ask you to confirm your identity.
- Access to the data we hold about you (Art. 15 GDPR)
- Correction of wrong or incomplete data (Art. 16)
- Deletion (Art. 17)
- Restriction of processing (Art. 18)
- Portability: a copy of data you gave us, in a machine-readable format (Art. 20)
- Objection to processing based on our legitimate interest, including your naming in a provider profile (Art. 21)
- Withdrawal of consent, for example for the newsletter, with effect from then on (Art. 7(3)). Every newsletter has an unsubscribe link.
To delete your account, write to us at the address above.
If you think we have handled your data unlawfully, you can complain to a data protection authority. In Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at. You can also complain in the EU country where you live or work.
8. Security, children and changes
Security. All traffic is encrypted (HTTPS). Server access is limited to named staff, and only people who need data for their work can see it. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the authority as the GDPR requires.
Children. The site is for businesses. It is not meant for anyone under 16, and we don't knowingly collect their data.
Changes. We update this policy when the site or the law changes. The date at the top shows the current version. We will email account holders about significant changes before they take effect.
Contact. Outrun Advisory FlexCo, Lerchenfelder Str. 74 2/1, 1080 Wien, Austria, privacy@stablecoinpayments.io.