Privacy Policy

1. Who this covers

This policy explains how PSX Holdings LLC ("we", "us"), which operates PSXPay, handles personal information about website visitors, applicants, merchants and the buyers who use merchants' stores.

For buyer information collected through the plugin, the merchant decides why that information is collected, and we process it for the merchant as a service provider. Buyers should also read the merchant's privacy policy and may send requests to the merchant directly. For everything else in this policy, we are responsible for the information.

2. What we collect

Website visitors

Our hosting provider records standard server logs, such as IP address, browser type, pages requested and the time of the request. This website does not use advertising cookies or third-party analytics.

Applicants

What you submit on our application form: store URL, products, monthly volume, current processor, and your name and email.

Merchants

• account and business contact details;
• your Stripe account identifier, and transaction and fee data needed to calculate and reconcile our fees;
• storefront content we scan, and the resulting findings and scores;
• support messages and billing records.

Buyers

• email address or other sign-in identifier;
• age and qualified-researcher affirmations, and disclaimer acknowledgments;
• the signed intended-use attestation, with its timestamp and hash;
• technical details of the signing event, such as IP address and browser type.

We do not collect or store card numbers. Card details go directly to Stripe, whose privacy policy applies.

3. How we use information

• to review applications and provide, secure and improve the Services;
• to record attestations and maintain the ledger;
• to scan storefronts, calculate scores, and carry out the score thresholds;
• to calculate and collect our fees;
• to contact you about your account, including notices about your score;
• to comply with the law and with processor and card network requirements, and to prevent fraud and misuse.

4. How we share information

We do not sell personal information or share it for cross-context advertising. We share it with:

• The merchant. A merchant can see and export attestation records for its own store.
• Stripe, its acquiring banks, and the card networks. Under the Platform Agreement, we may share scan results and attestation logs with them for underwriting, risk review and compliance.
• Service providers. Companies that host the Services, deliver email, or otherwise work on our behalf under confidentiality obligations.
• Authorities and advisers. Where the law requires it, or where needed to protect rights and safety, and with our professional advisers.
• Successors. As part of a merger, acquisition or sale of assets, subject to this policy.

5. Retention

We keep attestation records and related ledger data for 2 years after they are created. We keep merchant account, billing and scan records for the same period after the merchant's account ends. We keep declined applications for 24 months and server logs for up to 90 days. We keep information longer where the law or a legal claim requires it.

Ledger entries are linked by hashes, so deleting one can break the chain. Where we must act on a deletion request and no retention duty applies, we will mask or remove personal details wherever we can do so while keeping the entry's hash.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to appeal a decision about your request. We will not discriminate against you for exercising these rights. Email support@psxpay.com to make a request. We may need to verify your identity, and we may refer requests about buyer records to the relevant merchant.

7. Security

We use administrative and technical safeguards appropriate to the information we handle. No system is perfectly secure, and we can't guarantee absolute security.

8. Age limit

The Services are for people 21 and older. We do not knowingly collect information from anyone younger. Contact us if you think we have, and we will delete it unless the law requires otherwise.

9. Where information is processed

The Services are operated from the United States, and information is processed there.

10. Changes

We will post updates here and change the date above. We will notify merchants of material changes.

11. Contact

PSX Holdings LLC, 556 N RT 17, STE 5 Paramus NJ 07660. Email: support@psxpay.com.