Privacy Policy

---

Last Updated: [2025-02-14 09:10]

TechPayHub ("Company," "we," "us," or "our") is committed to protecting the privacy and security of personal and financial data. As a technology provider facilitating payment services, we comply with global data protection regulations, including GDPR, CCPA, and PCI DSS, ensuring that our clients and their customers' sensitive information remain secure.

This Privacy Policy outlines how we collect, use, share, and protect personal data when providing services to payment providers.

This policy applies to all personal information collected or processed through our payment processing infrastructure, fraud detection systems, APIs, and related services. It covers data provided by payment providers, merchants, and end-users who interact with our services, either directly or indirectly.

We collect and process the following categories of data:

• Transaction Data – Payment card details (tokenized where applicable), billing addresses, transaction timestamps, and purchase details.
• Identification Data – Names, email addresses, phone numbers, and government-issued IDs (where required for compliance).
• Device & Behavioral Data – IP addresses, device IDs, geolocation, and transaction patterns for fraud detection.

• Corporate Information – Business names, legal entity data, tax identification numbers, and contact details.
• Financial Data – Linked bank accounts, settlement details, and reconciliation reports.

• API Usage Logs – Requests, responses, and error logs for service optimization.
• Security Data – Authentication credentials, encryption keys (hashed), and access logs.

We process collected data strictly for the following purposes:

• Payment Processing – Ensuring seamless transaction authorization, settlement, and reconciliation.
• Fraud Prevention & Risk Management – Utilizing AI-driven fraud detection to prevent chargebacks and suspicious activities.
• Regulatory Compliance – Adhering to KYC (Know Your Customer), AML (Anti-Money Laundering), and PCI DSS standards.
• Service Optimization – Enhancing performance, uptime, and security through real-time monitoring and analytics.
• Client Support & Dispute Resolution – Addressing transaction disputes, refunds, and chargeback inquiries.

We do not sell personal data. However, we may share data with:

• Payment Networks & Financial Institutions – To process transactions securely.
• Regulatory & Compliance Authorities – When legally required for audits, fraud investigations, or AML compliance.
• Third-Party Security & Fraud Prevention Services – To enhance transaction security.
• Cloud Service Providers & Hosting Partners – To maintain infrastructure and data storage (secured with encryption).

All third parties must comply with strict confidentiality agreements and data protection obligations.

As a global service provider, we may transfer data to jurisdictions outside the EEA (European Economic Area) or U.S., ensuring compliance through:

• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Adequate country determinations per GDPR standards

We retain data only as long as necessary for legal, regulatory, and operational purposes, including chargeback periods and compliance audits. Our security framework includes:

• PCI DSS Level 1 Compliance – Ensuring payment data encryption and secure storage.
• AES-256 Encryption & TLS 1.2+ – Protecting data at rest and in transit.
• Anonymization & Tokenization – Limiting exposure of sensitive payment data.
• Access Controls & Multi-Factor Authentication (MFA) – Restricting unauthorized access.

Depending on jurisdiction, individuals have rights over their data, including:

• Right to Access – Request a copy of processed data.
• Right to Rectification – Correct inaccuracies in stored data.
• Right to Erasure ("Right to be Forgotten") – Request deletion of personal data (subject to legal exceptions).
• Right to Data Portability – Obtain a structured, machine-readable format of personal data.
• Right to Object & Restrict Processing – Limit the use of personal data for certain purposes.

Requests can be submitted via [contact email/portal] and will be processed in accordance with regulatory timelines.

We adhere to the Payment Card Industry Data Security Standard (PCI DSS) and implement:

• Strict access controls for payment data
• Regular vulnerability scanning & penetration testing
• Security Incident & Breach Response Protocols

Additionally, we comply with GDPR, CCPA, and regional financial regulations, ensuring that data is handled lawfully.

We may update this policy to reflect changes in legal, technological, or business requirements. Updates will be posted on our website, with notifications provided where applicable.

For any privacy-related inquiries or requests, contact:

📧 compliance@techpayhub.com

By using our services, you acknowledge and consent to this Privacy Policy.