Privacy

What this covers

This notice explains what we collect when you use the Qyubi dashboard and API, and what we collect when a shopper pays through a checkout page we host on a merchant's behalf.

For shopper data, the merchant is the controller and we act as their processor. For merchant account data, we are the controller.

Merchant data

We collect the information needed to open and operate an account: name, email address, business details, and the identity and payout information required by our payment partners for verification.

We also record operational data such as sign-in events, API key usage, and changes to account settings, so that we can answer questions about who changed what.

Shopper data

On a hosted checkout page we collect the email address entered by the shopper and the order details supplied by the merchant, along with the outcome of the payment.

Full card numbers never reach our servers. Card details are collected directly by our payment partner in an isolated frame; we receive only a token and the last four digits.

Why we hold it

To provide the service, to process payments and refunds, to detect and prevent fraud, and to meet the legal and regulatory obligations that apply to payment businesses.

We do not sell personal data, and we do not use shopper data to build marketing profiles.

Who we share it with

Our payment partners, for processing and verification. Our infrastructure providers, for hosting and storage. Professional advisers and authorities where we are legally required to disclose.

Merchants receive the data associated with their own transactions. Account isolation is enforced at the data layer and again in the database, so one merchant cannot read another's records.

How long we keep it

Transaction records are retained for the period required by financial regulation, which is typically several years after the transaction.

Account data is retained while the account is open and for a limited period afterwards, so that we can handle disputes and meet our obligations.

Your rights

Depending on where you live you may have the right to access, correct, export, or delete your personal data, and to object to certain processing.

Where we hold data on behalf of a merchant, we will direct a shopper's request to that merchant and assist them in responding.

Contact

Privacy questions and requests can be sent through the contact form on this site and will be routed to the person responsible.