The application code processes submitted CSV/JSON payloads in memory to produce the response. It does not intentionally store audit payloads or audit results in the Lira Ventures D1 database.
The service stores hashed API-key identifiers, credit balances, order IDs, PayPal capture/event IDs, event types, amounts, fees, environment, timestamps and technical state needed to operate payments, prevent duplicate processing and reconcile service access.
Payments are handled by PayPal. Lira Ventures does not receive or store full card numbers or CVV/CVC through this API.
Cloudflare processes requests as the hosting/infrastructure provider and may process network/request metadata under its own terms and privacy practices.
Do not submit unnecessary personal or sensitive information. Never submit passwords, private keys, authentication/session tokens, API secrets, full card numbers or CVV/CVC.
Audit payloads/results are not intentionally persisted by application code. Payment/order/security metadata is retained as needed for service operation, dispute handling, accounting and applicable legal obligations. Retention may be adjusted before Live launch to meet owner/accounting requirements.