📌 Full guide updated
Who holds your ID data, chats, Pay funds, Web3 keys, and card secrets? Read the new overview: MPChat Security & Privacy Overview.
📖 Key points
ID & face data: collected and processed by identity provider Sumsub. MPChat does not receive or store raw ID images or biometric templates — only verification outcomes and structured fields.
Chat content: private conversations use end-to-end encryption (E2EE). Decryption keys stay on your and your contacts’ devices; MPChat servers cannot decrypt private chats.
MPChat Pay funds: balances are ledgered by MP PAYMENT INC; underlying on-chain USDT sits in licensed partner Cobo and HashKey custody solutions (Cobo is ISO 27001 certified). Staff cannot unilaterally move funds; freezes or holds may apply under the agreement.
MPChat Web3: self-custody with keys generated and signed inside Turnkey TEE; no seed-phrase display and export is not available today.
Card secrets: card number / expiry / CVV are not persisted; viewing them in the App loads live data from the card issuer API.
Withdrawal controls: suspicious or high-risk withdrawals go through multiple layers of internal and external review.
For partner introductions, disclosed licenses, and anti-scam reminders, see the Security & Privacy Overview.
