Privacy Policy

Adpay is a payment operations platform operated by Adtelligent ("Adpay", "we", "us"). We help merchants accept, reconcile, and report on payments processed through connected storefronts (such as Wix) and underlying payment processors (such as HandyPay/PowerTranz). This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices and rights you have.

This policy applies to our website, dashboard, APIs, and related services (collectively, the "Services"). It does not apply to third-party services that you connect to Adpay, which are governed by their own privacy policies.

For account, billing, and website data, Adpay acts as a data controller. For transaction and buyer information that we process on behalf of a merchant to deliver payment operations, Adpay generally acts as a data processor (or service provider), handling that data according to the merchant's instructions and our agreement with them.

If you are a buyer who made a purchase from a merchant using Adpay, the merchant is the controller of your purchase data. Please direct privacy requests about a specific purchase to the merchant you transacted with.

We collect the following categories of information:

• Account data: name, email, password credentials, role, and organization details.
• Business data: legal/display name, billing and support email, phone, address, country, business type, and supported currencies.
• Installation data: connected store identifiers, site URLs, instance IDs, and entitlement/subscription status.
• Transaction metadata: amounts, currency, status, timestamps, order/service references, and processor references. We store a hashed buyer email by default and only retain a plaintext buyer email where necessary for reconciliation.
• Billing data: invoices, payment links, subscription plans, and payment status. Card details are handled by our payment processors — Adpay does not store full card numbers.
• Technical data: IP address, device/browser information, log and event data, and API request logs.

• Provide, operate, secure, and improve the Services.
• Authenticate users and manage access and entitlements.
• Process billing, generate invoices, and send weekly payment digests and lifecycle notifications.
• Reconcile transactions and produce settlement forecasts and reporting.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with legal, tax, and regulatory obligations.
• Communicate with you about your account, support, and important changes.

Where required (e.g., under the GDPR), we rely on the following legal bases: performance of a contract (to deliver the Services you request), legitimate interests (to secure and improve our platform), legal obligation (to meet financial and regulatory requirements), and consent (for optional communications, which you may withdraw at any time).

We do not sell your personal information. We share information only as needed to operate the Services:

• Payment processors (e.g., HandyPay/PowerTranz) to create payment sessions and process charges.
• Storefront platforms (e.g., Wix) to receive installation and order events.
• Infrastructure & email providers that host our platform and deliver transactional emails.
• Professional advisors and authorities where required by law or to protect rights and safety.
• Successors in the event of a merger, acquisition, or asset sale, subject to this policy.

We retain personal information for as long as your account is active and as needed to provide the Services. Financial and transaction records are typically retained for up to seven (7) years to satisfy tax, accounting, and regulatory requirements. When data is no longer needed, we delete or anonymize it. Event and API logs are retained on a rolling basis for security and troubleshooting.

We implement administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit, encryption of sensitive secrets at rest, role-based access controls, and scoped API credentials with HMAC request signing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may process and store information in countries other than where you reside. Where we transfer personal data across borders, we use appropriate safeguards (such as standard contractual clauses) where legally required.

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. You can manage core profile and organization details directly in your dashboard settings, and you may delete your account from the Security section.

To exercise other rights, contact us at legal@adtelligent.com. We will verify your request and respond within the timeframe required by applicable law.

We use strictly necessary cookies and similar technologies to keep you signed in, secure the Services, and remember preferences. We may use limited analytics to understand product usage. You can control cookies through your browser settings, though disabling some may affect functionality.

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at legal@adtelligent.com.