Privacy Policy

Last Updated: October 2024

1. Introduction

UltraPay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment processing services.

2. Information We Collect

We collect several types of information:

Account Information

  • Business name and contact information
  • Email address and Telegram handle
  • Website URL and platform details
  • Business type and category

Technical Information

  • API keys and credentials (encrypted)
  • Plugin configuration data
  • Server and hosting information
  • IP addresses and device information
  • Browser type and operating system

Transaction Data

  • Transaction amounts and frequencies
  • Payment method types
  • Success and failure rates
  • Risk scores and routing decisions
  • Aggregate transaction analytics

Note: We do not store complete credit card numbers, CVV codes, or other sensitive cardholder data. Payment information is processed directly by Stripe.

3. How We Use Your Information

We use collected information for:

  • Providing and maintaining our payment processing services
  • Operating cloaking technology and load balancing features
  • Monitoring transaction success rates and system performance
  • Detecting and preventing fraud
  • Providing customer support and technical assistance
  • Analyzing usage patterns to improve our services
  • Communicating service updates and important notices
  • Complying with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

Service Providers

  • Stripe (payment processing)
  • Cloud hosting providers
  • Database services
  • Analytics platforms

Legal Requirements

We may disclose information when required by law, to:

  • Comply with legal processes or government requests
  • Enforce our Terms of Service
  • Protect our rights, property, or safety
  • Investigate fraud or security issues

Business Transfers

If UltraPay is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption of sensitive data in transit and at rest
  • Secure API key storage with encryption
  • Regular security audits and updates
  • Access controls and authentication
  • Secure data centers and infrastructure

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

6. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain transaction records for financial reporting

Transaction data is typically retained for 7 years to comply with financial regulations. You may request deletion of your account data by contacting us.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your information
  • Portability: Request transfer of your data
  • Objection: Object to certain data processing activities
  • Restriction: Request restriction of processing

To exercise these rights, contact us through our contact form or Telegram support.

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain user sessions
  • Remember preferences and settings
  • Analyze site traffic and usage
  • Improve user experience

You can control cookies through your browser settings. Disabling cookies may affect functionality.

9. Third-Party Links

Our website may contain links to third-party sites (such as Stripe). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect information from children. If we become aware that we have collected information from a child, we will delete it promptly.

12. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information
  • Right to deletion of personal information
  • Right to non-discrimination for exercising rights

We do not sell personal information.

13. GDPR Compliance

For European Union residents, we comply with the General Data Protection Regulation (GDPR). Our legal bases for processing include:

  • Contractual necessity (to provide services)
  • Legitimate interests (to improve services and prevent fraud)
  • Legal compliance
  • Consent (where applicable)

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, providing additional notice. Continued use of our services after changes constitutes acceptance.

15. Contact Information

For questions about this Privacy Policy or to exercise your privacy rights, contact us:

  • Via our contact form at /contact
  • Through our Telegram support

16. Data Protection Officer

If required by applicable law, you may contact our Data Protection Officer through our contact channels for privacy-related inquiries.