Privacy Policy

Moneybag processes business, contact, payment, transaction, technical, and compliance information to provide payment gateway services, onboarding, payouts, fraud monitoring, reporting, and support.

Information We Collect

Merchant business information, including legal name, trading name, registration details, tax IDs, addresses, ownership details, and business category.
Contact information for account users, authorized representatives, finance teams, and support contacts.
Payment and transaction data, including transaction IDs, amounts, currencies, payment method type, authorization status, refunds, disputes, settlements, and payout records.
Technical data such as IP address, device and browser details, API logs, webhook delivery logs, dashboard activity, and security events.
Compliance and onboarding information, including identity documents, beneficial ownership details, bank account information, and documents required by banking or payment partners.

How We Use Information

To review merchant applications and verify account information.
To process payments, authorization requests, refunds, settlements, chargebacks, reconciliation, and payout reporting.
To monitor transaction risk, investigate suspicious activity, and support compliance reviews.
To provide product support, operational notices, security updates, and account communications.
To meet legal, regulatory, card network, banking partner, and local payment method requirements.

How Information Is Shared

Moneybag may share information with banks, card networks, payment method providers, identity verification providers, fraud and risk vendors, cloud and service providers, professional advisers, regulators, or law enforcement where required for payment operations, compliance, risk review, or legal obligations. Moneybag should not state that it sells or does not sell personal data until legal review confirms the correct jurisdiction-specific wording.

Security and Retention

Moneybag uses practical controls such as encryption in transit, access controls, monitoring, and PCI-DSS aligned handling where applicable. Information is retained as long as needed for payment processing, legal obligations, audit, accounting, fraud prevention, dispute handling, and regulatory requirements.

Rights and Requests

Individuals may have rights to access, correct, delete, restrict, transfer, or object to certain processing depending on applicable law. Requests should be sent through the privacy contact channel once approved by Moneybag legal.