Privacy

This notice explains what we collect when you use the Qyubi dashboard and API, and what we collect when a shopper pays through a checkout page we host on a merchant's behalf.

For shopper data, the merchant is the controller and we act as their processor. For merchant account data, we are the controller.

We collect the information needed to open and operate an account: name, email address, business details, and the identity and payout information required by our payment partners for verification.

We also record operational data such as sign-in events, API key usage, and changes to account settings, so that we can answer questions about who changed what.

On a hosted checkout page we collect the email address entered by the shopper and the order details supplied by the merchant, along with the outcome of the payment.

Full card numbers never reach our servers. Card details are collected directly by our payment partner in an isolated frame; we receive only a token and the last four digits.

To provide the service, to process payments and refunds, to detect and prevent fraud, and to meet the legal and regulatory obligations that apply to payment businesses.

We do not sell personal data, and we do not use shopper data to build marketing profiles.

Our payment partners, for processing and verification. Our infrastructure providers, for hosting and storage. Professional advisers and authorities where we are legally required to disclose.

Merchants receive the data associated with their own transactions. Account isolation is enforced at the data layer and again in the database, so one merchant cannot read another's records.

Transaction records are retained for the period required by financial regulation, which is typically several years after the transaction.

Account data is retained while the account is open and for a limited period afterwards, so that we can handle disputes and meet our obligations.

Depending on where you live you may have the right to access, correct, export, or delete your personal data, and to object to certain processing.

Where we hold data on behalf of a merchant, we will direct a shopper's request to that merchant and assist them in responding.

Privacy questions and requests can be sent through the contact form on this site and will be routed to the person responsible.