1. Introduction
Card2pay ("we", "us", "our") operates the Card2pay payment platform at card2pay.app and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, merchant dashboard, payment links, and checkout flows.
2. Information we collect
We may collect the following categories of information:
- Account data — name, email address, company name, and authentication credentials when you register as a merchant.
- Payment and order data — order references, amounts, currencies, payer email addresses supplied by merchants or checkout integrations, transaction status, and settlement details.
- Technical data — IP address, browser type, device information, log files, and cookies required for security and session management.
- Communications — messages you send to our support team and records of support interactions.
3. How we use information
We use collected information to:
- Provide, operate, and maintain the Card2pay platform;
- Process payments and notify integrated merchant sites of order status;
- Authenticate users and prevent fraud or abuse;
- Comply with legal, regulatory, and accounting obligations;
- Respond to support requests and improve our services.
4. Sharing of information
We do not sell personal data. We may share information with payment processors, blockchain settlement providers, hosting infrastructure partners, and professional advisers where necessary to deliver the service or comply with law. Integrated merchant sites receive only the order and payment confirmation data required to fulfil their transactions.
5. Data retention
We retain account and transaction records for as long as your account is active and as required for legal, tax, audit, and dispute-resolution purposes. You may request deletion of non-mandatory data by contacting us, subject to regulatory retention requirements.
6. Security
We implement administrative, technical, and organisational measures designed to protect your information, including encrypted transport, access controls, and signed webhooks for merchant integrations. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.
7. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. To exercise these rights, contact us at info@card2pay.app.
8. International transfers
Your information may be processed in countries other than your country of residence. Where required, we implement appropriate safeguards for such transfers.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.
10. Contact
Questions about this Privacy Policy may be sent to info@card2pay.app or via our Contact Us page.