Privacy Policy
Last updated: May 2026
At PayBrain, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment processing, invoicing, and protected file sharing services through our website and mobile applications.
1. Information We Collect
Personal Information
We collect information you provide directly to us, including:
- Name, email address, phone number, and business information
- Banking and financial account information for payment processing
- Government-issued identification for verification purposes
- Business documentation and tax identification numbers
Transaction Information
When you process payments and create invoices through our service, we collect:
- Transaction amounts, dates, and descriptions
- Customer payment information (processed securely through Stripe)
- Invoice details including customer emails and billing information
- Files you upload for protected content delivery
- QR code generation and usage data
- POS terminal and mobile app interaction data
Technical Information
We automatically collect certain information about your device and usage:
- IP address, browser type, and operating system
- Login times, pages viewed, and features used
- Device identifiers and mobile app usage data
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the information we collect to:
- Process payments and provide our core payment services
- Create and send invoices to your customers
- Provide secure file sharing and protected content delivery
- Verify your identity and prevent fraud
- Comply with legal and regulatory requirements
- Communicate with you about your account and transactions
- Improve our services and develop new features
- Provide customer support and technical assistance
- Send important notices and security alerts
- Analyze usage patterns and optimize user experience
3. How We Share Your Information
We may share your information in the following circumstances:
Service Providers
We work with trusted third-party service providers who help us operate our business, including payment processors (Stripe), cloud hosting providers (AWS), email services, and analytics services. These partners are contractually obligated to protect your information.
Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
With Your Consent
We may share your information for other purposes with your explicit consent.
SMS / Mobile Information — No Sharing
No mobile information (including phone numbers, SMS opt-in status, and consent records) collected by PayBrain or by merchants using PayBrain will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent records are never sold, rented, or transferred to any third party for marketing.
The only mobile-information sharing that occurs is with subcontractors strictly necessary to deliver the SMS service itself — specifically our SMS gateway provider (Plivo) and the destination mobile carriers responsible for delivering messages to the recipient. These providers are contractually prohibited from using mobile information for any purpose other than delivering the requested messages.
All categories of consent and opt-in records described elsewhere in this policy exclude text-messaging originator opt-in data and consent; that information will not be shared with any third parties under any circumstance.
4. Data Security
We implement industry-standard security measures to protect your information:
- End-to-end SSL/TLS encryption for all data transmission
- PCI DSS compliance for payment card data processing
- Secure cloud storage with AWS encryption at rest
- Regular security audits and vulnerability assessments
- Multi-factor authentication for account access
- Secure file storage with access controls for protected content
- Access controls and employee security training
- SOC 2 Type II compliance for data handling procedures
5. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal requirements)
- Portability: Request a copy of your data in a portable format
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, please contact us at privacy@paybrain.io.
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Account information: While your account is active and for 7 years after closure for tax purposes
- Transaction data: 7 years for compliance with financial regulations
- Invoice and customer data: While your account is active and as legally required
- Protected files: According to your invoice settings or until you delete them
- Usage analytics: 2 years for service improvement purposes
7. International Data Transfers
PayBrain operates globally and may transfer your information internationally to provide our services:
- Cloud Infrastructure: We use AWS data centers in multiple regions for optimal performance and reliability
- Payment Processing: Stripe processes payments globally with appropriate data protection measures
- Customer Support: Our support team may access your data from different locations to assist you
- Safeguards: All international transfers comply with applicable data protection laws and include appropriate contractual protections
We ensure appropriate safeguards are in place for all international transfers, including standard contractual clauses, adequacy decisions, and encryption in transit and at rest.
8. Third-Party Services
Our service integrates with trusted third-party providers to deliver our features:
- Stripe: Payment processing and financial services
- Amazon Web Services (AWS): Cloud hosting, file storage, and data processing
- Plivo: SMS notifications and phone verification
- SendGrid: Email delivery services
- Analytics providers: For service improvement and user experience optimization
These services have their own privacy policies, and we encourage you to review them.
9. Children's Privacy
Our service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.
10. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of our service after changes become effective constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us: