Legal
Privacy policy
Enterprise Pay Gateway collects your account details, business profile, products and the payment records Stripe reports back to us. We never receive card numbers, identity documents or bank credentials — those go straight to Stripe. We do not sell personal data or use advertising trackers.
Last updated 9 September 2026
What we collect
- Account data: your name, email address and password hash.
- Business data: business name, description, website, industry, support email and storefront slug.
- Product and transaction data: the products you create, and payment records returned to us by Stripe such as amount, currency, status and identifiers.
- Enquiry data: anything you send us through the contact form.
- Technical data: standard server logs and error reports used to keep the service working.
What we do not collect
- We never receive or store full card numbers, CVCs, or the identity documents and bank credentials you submit during verification. Those go directly to Stripe through its hosted flows.
Why we process it
- To provide the service you signed up for, including creating checkout sessions and calculating platform fees.
- To bill you for your subscription and platform fees.
- To provide support and respond to enquiries.
- To keep the service secure and to meet legal and accounting obligations.
Who we share it with
- Stripe, for payment processing, verification and payouts.
- Our hosting and database infrastructure provider, which stores data encrypted at rest.
- Authorities, where we are legally required to.
- We do not sell personal data and we do not share it with advertisers.
How long we keep it
- Account and business records are kept while your account is active and for a period afterwards to meet accounting and tax obligations. Transaction records are kept for the period required by law in the relevant jurisdiction. Contact enquiries are kept for up to two years.
Your rights
- Depending on where you live you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Contact us and we will respond within the period required by applicable law.
Cookies
- We use only the cookies and local storage needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies.
This policy is a working draft for a pre-launch product. The data controller's registered name, address and data protection contact will be published before launch. Contact us with any privacy question in the meantime.