How we handle the information you share with us.

Who and what this Policy covers.

This Policy applies to personal information we collect:

• from visitors to our websites and marketing channels;
• from prospects and representatives of business customers;
• from users who interact with us for support, events, demos, and trials; and
• as otherwise described at the point of collection.

What we collect.

We collect the following categories of personal information:

• Identifiers, such as name, business email address, business phone number, business address, and online identifiers (such as IP address and browser identifiers);
• Professional information, such as employer, job title, role, and department;
• Account information (where applicable), such as username, hashed credentials, authentication factors, and account settings;
• Commercial information, such as product interest, form submissions, and demo or trial activity;
• Internet or other network activity information, such as pages viewed, features used, referring URLs, device and session information, and log information;
• Approximate location derived from IP address (we do not intentionally collect precise geolocation);
• Audio, electronic, or visual information, such as recordings of meetings or demos that you consent to, and support chat transcripts; and
• Inferences, such as our inferences about your product interest, role, or company fit.

We do not intentionally collect sensitive personal information (for example, government-issued identifiers, precise geolocation, biometric information, or health data) about visitors or prospects, and we ask that you not submit such information through the Services or our websites.

Where it comes from.

We collect personal information from the following sources:

• directly from you, when you contact us, request a demo, sign up, or interact with our Services;
• from your employer or an authorized colleague, when we are engaged by a business customer;
• automatically, through cookies, tags, and server logs, as further described in Section 7;
• from service providers and analytics partners; and
• from publicly available sources, such as business directories and professional networks.

How we use personal information.

We use personal information to:

• provide, operate, secure, and improve the Services;
• authenticate users and manage accounts;
• respond to inquiries and provide customer support;
• send transactional communications, such as service notices and security alerts;
• conduct marketing and business development, including sending promotional communications where permitted, and to follow up on demo or contact requests;
• detect, investigate, and prevent fraud, abuse, and security incidents, including bot and abuse protection on submission forms;
• perform analytics, including measuring and improving the performance of our websites and Services;
• comply with legal obligations and enforce our terms and policies; and
• for other purposes disclosed at the time of collection or with your consent.

How we share personal information.

We may disclose personal information to:

• service providers and processors who perform services on our behalf (such as hosting, analytics, email delivery, customer support, and security), subject to contractual confidentiality and use restrictions;
• Third-Party Financial Institutions that you direct us to connect to or transmit instructions to on your behalf;
• professional advisors, such as auditors, accountants, and attorneys, subject to confidentiality obligations;
• government authorities or other third parties, where required by law, subpoena, or court order, or to protect rights, property, or safety;
• parties to a corporate transaction, such as a merger, acquisition, financing, or sale of assets; and
• with your consent or at your direction.

Financial institutions and other third parties that you direct us to connect to or interact with may collect, use, and disclose information in accordance with their own privacy notices and policies. PayShore is not responsible for the privacy practices of those third parties, and we encourage you to review their privacy notices before providing information or connecting accounts through the Services.

No sale or cross-context behavioral advertising.

We do not sell personal information for money. We do not currently use personal information for cross-context behavioral advertising, and we do not currently "share" personal information for that purpose as those terms are defined under the CCPA/CPRA. If our practices change, we will update this Policy and provide any controls required by applicable law.

We do not knowingly sell or share personal information about consumers under 16.

Cookies and similar technologies.

Our websites use cookies and similar technologies to operate the site, measure performance, and protect against abuse. The categories we currently use include:

• Strictly necessary. Cookies and signals required for site functionality and security, including bot/abuse protection on submission forms.
• Analytics. Cookies and identifiers used to measure traffic and improve our site (we currently use Google Analytics for this purpose).

You can control cookies through your browser settings, including by blocking or deleting cookies. Some site features may not function properly if cookies are disabled.

If we add additional cookie categories (such as advertising cookies) or implement preference controls in the future, we will update this Section.

How long we keep personal information.

We retain personal information only as long as necessary for the purposes described in this Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of information and its use. When personal information is no longer needed, we delete or de-identify it.

Your rights.

Depending on where you live, you may have rights with respect to personal information we hold about you, including:

• the right to know or access the personal information we collect, use, and disclose;
• the right to request correction of inaccurate personal information;
• the right to request deletion of personal information, subject to exceptions;
• the right to portability of certain personal information;
• the right to opt out of the sale or sharing of personal information (we do not currently sell or share, as described in Section 6);
• the right to opt out of certain targeted advertising or profiling, where applicable; and
• the right to appeal a decision on a rights request, where applicable.

To submit a request, email privacy@payshore.com with a description of your request and your relationship to PayShore (for example, website visitor, prospect, or contact at a business customer). Upon receipt of a verifiable consumer request, we will respond as required by applicable law. You may designate an authorized agent to submit a request on your behalf, subject to verification. We will not discriminate against you for exercising your rights.

Where we process personal information on behalf of a business customer (for example, about that customer's authorized users), please direct your request to that customer. We will reasonably cooperate with the customer in responding.

State-specific notices.

a. California residents (CCPA/CPRA)

In the twelve (12) months preceding the "Last Updated" date below, we collected the categories of personal information described in Section 2, from the sources described in Section 3, for the purposes described in Section 4, and disclosed those categories to the categories of recipients described in Section 5.

We do not sell personal information for money, and we do not currently "share" personal information for cross-context behavioral advertising as described in Section 6. California residents may exercise the rights described in Section 9 by emailing privacy@payshore.com. Subject to applicable law, California residents may request information regarding (i) the categories of personal information we have collected about them, (ii) the categories of sources from which the information was collected, (iii) the business or commercial purposes for collecting, using, or disclosing the information, (iv) the categories of third parties to whom the information was disclosed, and (v) the specific pieces of personal information we have collected about them. Requests to delete personal information are subject to exceptions and limitations permitted by applicable law.

Shine the Light: California Civil Code Section 1798.83 permits California residents to request information regarding disclosure of personal information to third parties for direct-marketing purposes. We do not disclose personal information to third parties for their direct-marketing purposes.

b. Virginia, Colorado, Connecticut, Utah, and Texas residents

If you are a resident of Virginia, Colorado, Connecticut, Utah, or Texas, you may have the rights described in Section 9 under your state's comprehensive privacy law. We do not currently process personal information for targeted advertising on our marketing website. To submit a rights request, email privacy@payshore.com.

Appeals: If we decline your request and your state provides an appeals process, you may appeal by emailing privacy@payshore.com with the word "Appeal" in the subject line. We will respond within the time required by your state's law.

c. Other states

Residents of other states may have rights under state privacy laws that apply to them. We honor rights required by applicable law.

How we protect personal information.

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Where we process personal information on behalf of a business customer, additional safeguards are described in our Security Addendum, which is available on PayShore's website or upon request.

Children's information.

The Services are directed to businesses and their authorized users. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact privacy@payshore.com and we will take appropriate steps.

International users.

Our Services are intended for users in the United States. If you access the Services from outside the United States, your personal information will be processed in the United States, which may have different privacy laws than your jurisdiction.

Third-party websites and services.

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Review their privacy notices before providing personal information.

Changes to this Policy.

We may update this Privacy Policy from time to time to reflect changes in applicable laws or regulations, our business practices, our Services, or our efforts to better serve our customers and users. We reserve the right to amend this Privacy Policy at our discretion and at any time. When we make material changes, we will provide notice as required by applicable law, including by posting the revised Privacy Policy on our website and, where appropriate, by providing notice through the Services, on our website homepage, or by email. The revised Privacy Policy will become effective upon posting unless otherwise stated.

Contact us.

Questions about this Policy or our privacy practices, or to submit a rights request, contact: