How we handle the information you share with us.

Who and what this Policy covers.

This Policy applies to personal information we collect:

• from visitors to our websites and marketing channels;
• from prospects and representatives of business customers;
• from users who interact with us for support, events, demos, and trials; and
• as otherwise described at the point of collection.

What we collect.

We collect the following categories of personal information:

• Identifiers, such as name, business email address, business phone number, business address, and online identifiers (such as IP address and browser identifiers);
• Professional information, such as employer, job title, role, and department;
• Account information (where applicable), such as username, hashed credentials, authentication factors, and account settings;
• Commercial information, such as product interest, form submissions, and demo or trial activity;
• Internet or other network activity information, such as pages viewed, features used, referring URLs, device and session information, and log information;
• Approximate location derived from IP address (we do not intentionally collect precise geolocation);
• Audio, electronic, or visual information, such as recordings of meetings or demos that you consent to, and support chat transcripts; and
• Inferences, such as our inferences about your product interest, role, or company fit.

We do not intentionally collect sensitive personal information (for example, government-issued identifiers, precise geolocation, biometric information, or health data) about visitors or prospects, and we ask that you not submit such information through the Services or our websites.

Where it comes from.

We collect personal information from the following sources:

• directly from you, when you contact us, request a demo, sign up, or interact with our Services;
• from your employer or an authorized colleague, when we are engaged by a business customer;
• automatically, through cookies, tags, and server logs, as further described in Section 7;
• from service providers and analytics partners; and
• from publicly available sources, such as business directories and professional networks.

How we use personal information.

We use personal information to:

• provide, operate, secure, and improve the Services;
• authenticate users and manage accounts;
• respond to inquiries and provide customer support;
• send transactional communications, such as service notices and security alerts;
• conduct marketing and business development, including sending promotional communications where permitted, and to follow up on demo or contact requests;
• detect, investigate, and prevent fraud, abuse, and security incidents, including bot and abuse protection on submission forms;
• perform analytics, including measuring and improving the performance of our websites and Services;
• comply with legal obligations and enforce our terms and policies; and
• for other purposes disclosed at the time of collection or with your consent.

How we share personal information.

We may disclose personal information to:

• service providers and processors who perform services on our behalf (such as hosting, analytics, email delivery, customer support, and security), subject to contractual confidentiality and use restrictions;
• Third-Party Financial Institutions that you direct us to connect to or transmit instructions to on your behalf;
• professional advisors, such as auditors, accountants, and attorneys, subject to confidentiality obligations;
• government authorities or other third parties, where required by law, subpoena, or court order, or to protect rights, property, or safety;
• parties to a corporate transaction, such as a merger, acquisition, financing, or sale of assets; and
• with your consent or at your direction.

No sale or cross-context behavioral advertising.

We do not sell personal information for money. We do not currently use personal information for cross-context behavioral advertising, and we do not currently "share" personal information for that purpose as those terms are defined under the CCPA/CPRA. If our practices change, we will update this Policy and provide any controls required by applicable law.

We do not knowingly sell or share personal information about consumers under 16.

Cookies and similar technologies.

Our websites use cookies and similar technologies to operate the site, measure performance, and protect against abuse. The categories we currently use include:

• Strictly necessary. Cookies and signals required for site functionality and security, including bot/abuse protection on submission forms (provided by Cloudflare Turnstile).
• Analytics. Cookies and identifiers used to measure traffic and improve our site (we currently use Google Analytics for this purpose).

You can control cookies through your browser settings, including by blocking or deleting cookies. Some site features may not function properly if cookies are disabled.

If we add additional cookie categories (such as advertising cookies) or implement preference controls in the future, we will update this Section.

How long we keep personal information.

We retain personal information only as long as necessary for the purposes described in this Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of information and its use. When personal information is no longer needed, we delete or de-identify it.

Your rights.

Depending on where you live, you may have rights with respect to personal information we hold about you, including:

• the right to know or access the personal information we collect, use, and disclose;
• the right to request correction of inaccurate personal information;
• the right to request deletion of personal information, subject to exceptions;
• the right to portability of certain personal information;
• the right to opt out of the sale or sharing of personal information (we do not currently sell or share, as described in Section 6);
• the right to opt out of certain targeted advertising or profiling, where applicable; and
• the right to appeal a decision on a rights request, where applicable.

To submit a request, email privacy@payshore.com with a description of your request and your relationship to PayShore (for example, website visitor, prospect, or contact at a business customer). We will verify your request as required by law and respond within the time required by applicable law. You may designate an authorized agent to submit a request on your behalf, subject to verification. We will not discriminate against you for exercising your rights.

Where we process personal information on behalf of a business customer (for example, about that customer's authorized users), please direct your request to that customer. We will reasonably cooperate with the customer in responding.

State-specific notices.

a. California residents (CCPA/CPRA)

In the twelve (12) months preceding the "Last Updated" date below, we collected the categories of personal information described in Section 2, from the sources described in Section 3, for the purposes described in Section 4, and disclosed those categories to the categories of recipients described in Section 5.

We do not sell personal information for money, and we do not currently "share" personal information for cross-context behavioral advertising as described in Section 6. California residents may exercise the rights described in Section 9 by emailing privacy@payshore.com. If we deny your request, you may submit an appeal by replying with the word "Appeal" in the subject line, and you may also contact the California Privacy Protection Agency.

Shine the Light: California Civil Code Section 1798.83 permits California residents to request information regarding disclosure of personal information to third parties for direct-marketing purposes. We do not disclose personal information to third parties for their direct-marketing purposes.

b. Virginia, Colorado, Connecticut, Utah, and Texas residents

If you are a resident of Virginia, Colorado, Connecticut, Utah, or Texas, you may have the rights described in Section 9 under your state's comprehensive privacy law. We do not currently process personal information for targeted advertising on our marketing website. To submit a rights request, email privacy@payshore.com.

Appeals: If we decline your request and your state provides an appeals process, you may appeal by emailing privacy@payshore.com with the word "Appeal" in the subject line. We will respond within the time required by your state's law.

c. Other states

Residents of other states may have rights under state privacy laws that apply to them. We honor rights required by applicable law.

How we protect personal information.

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Where we process personal information on behalf of a business customer, additional safeguards are described in our Security Addendum, which is available on PayShore's website or upon request. See also our Security page.

Children's information.

The Services are directed to businesses and their authorized users. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact privacy@payshore.com and we will take appropriate steps.

International users.

Our Services are intended for users in the United States. If you access the Services from outside the United States, your personal information will be processed in the United States, which may have different privacy laws than your jurisdiction.

Third-party websites and services.

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Review their privacy notices before providing personal information.

Changes to this Policy.

We may update this Policy from time to time. If we make material changes, we will provide notice, such as by updating the "Last Updated" date below or by posting a notice on our website. Your continued use of the Services after changes take effect constitutes acceptance.

Contact us.

Questions about this Policy or our privacy practices, or to submit a rights request, contact: