Privacy Policy

1. Overview

PaymentHooks, Inc. (“PaymentHooks,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our payment orchestration platform and related services (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use our Services.

2. Data We Collect

2.1 Information You Provide

• Account information (name, email, company, role)
• Payment and billing information
• Communications with our support and sales teams
• API keys and integration configurations

2.2 Information Collected Automatically

• Usage data (API calls, feature usage, login activity)
• Device and browser information
• IP address and geolocation data
• Performance and error logs

2.3 Payment Data

We process payment transaction data on behalf of our merchants. This includes transaction amounts, currencies, gateway responses, and customer identifiers. We do not store full credit card numbers — all card data is tokenized by our PCI-DSS compliant gateway partners.

3. How We Use Your Data

We use collected data for the following purposes:

• Providing, operating, and maintaining our Services
• Processing payments and preventing fraud
• Improving and optimizing our platform performance
• Sending administrative information (invoices, updates, security alerts)
• Responding to customer support inquiries
• Complying with legal obligations and regulatory requirements
• Generating anonymized analytics and benchmarking reports

4. Data Sharing & Disclosure

We do not sell your personal data. We may share your data with:

• Service providers: Third-party vendors who assist in delivering our Services (hosting, analytics, email delivery)
• Payment gateways: Gateway partners necessary to process your transactions
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures to protect your personal data, including:

• End-to-end encryption (AES-256) for data at rest and TLS 1.3 for data in transit
• PCI-DSS Level 1 compliance for all payment data handling
• SOC 2 Type II certified infrastructure
• Regular penetration testing and security audits
• Role-based access controls and multi-factor authentication
• 24/7 security monitoring and incident response

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide Services. You may request deletion of your data at any time, and we will comply within 30 days, subject to legal retention requirements for financial records (typically 7 years).

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data in a machine-readable format
• Opt-out: Opt out of marketing communications

To exercise these rights, please contact us at [email protected].

8. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. We will also provide email notice for significant changes at least 30 days before they take effect.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: