Privacy Policy

Merchant accounts: name, email, password hash, business and verification details, documents you upload, and activity logs.

Payers: data the merchant or payer gives us for a payment (such as email, name, country), the payment details needed for the chosen method, IP address and device information used for fraud prevention.

To provide and secure the service (contract), to meet legal duties such as anti-money-laundering checks and record keeping (legal obligation), and to prevent fraud and improve the service (legitimate interests).

Payment and infrastructure partners that process payments for us, hosting and email providers, and authorities where the law requires. Payment partners receive the merchant's identity and the order data they need to process the payment.

Where data leaves the EEA we use appropriate safeguards such as standard contractual clauses.

Account and transaction records are kept for as long as the law requires (usually 5–10 years). Other data is deleted when no longer needed.

You can ask for access, correction, deletion, restriction, portability, and object to processing. You may also complain to your data protection authority.