Privacy Policy — ConvergePay

ConvergePay collects personal information that you voluntarily provide when you create an account, submit a support ticket, fill out a contact form, subscribe to our newsletter, or interact with our services in any way. This information may include your full name, email address, phone number, business name, mailing address, and payment-related details necessary for account management. We also automatically collect certain technical data when you visit our website, including your IP address, browser type and version, operating system, referring URL, pages visited, time spent on each page, and click patterns. This data is collected through cookies, web beacons, and similar tracking technologies. Additionally, when you contact our support team via chat, email, or phone, we may record and store the content of those interactions to improve service quality and maintain accurate support records. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless explicitly required and consented to for specific services.

We use the personal information we collect for several essential purposes. Primarily, your data enables us to provide, maintain, and improve our payment support services — including responding to your inquiries, resolving technical issues, and delivering personalized recommendations based on your account configuration and transaction history. We also use your information to communicate important service updates, security alerts, and policy changes that may affect your account. With your consent, we may send marketing communications about new features, educational content, and promotional offers that we believe are relevant to your business. Your technical browsing data helps us analyze website performance, identify usability issues, and optimize our knowledge base content to better serve merchant needs. We use aggregated, anonymized data for statistical analysis and business intelligence purposes. We do not sell, rent, or trade your personal information to third parties for their marketing purposes under any circumstances.

Your personal data is stored on secure servers located in the United States, operated by reputable cloud infrastructure providers that maintain SOC 2 Type II and ISO 27001 certifications. We retain your personal information for as long as your account remains active or as needed to provide you with our services. If you close your account, we will retain your data for a reasonable period necessary to fulfill legal obligations, resolve disputes, and enforce our agreements — typically no longer than seven years for financial records as required by applicable regulations. Support interaction records are retained for three years to enable continuity of service and quality assurance. Technical browsing data collected through cookies is typically retained for 13 months unless you clear your browser data or adjust your cookie preferences sooner. We implement data minimization practices and regularly review our retention schedules to ensure we are not holding data longer than necessary.

Depending on your jurisdiction, you may have specific rights regarding your personal data. These rights may include the right to access the personal information we hold about you and receive a copy in a portable format, the right to request correction of inaccurate or incomplete data, the right to request deletion of your personal data subject to legal retention requirements, the right to restrict or object to certain processing activities, and the right to withdraw consent for marketing communications at any time. If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and how it is used, and the right to opt out of the sale of personal information. To exercise any of these rights, please contact us at info@conevrgepaycom.com with a detailed description of your request. We will respond to all legitimate requests within 30 days and may ask for identity verification to protect your account security.

ConvergePay works with carefully selected third-party service providers to deliver and improve our services. These partners include cloud hosting providers for infrastructure and data storage, analytics platforms such as Google Analytics for website performance monitoring, customer relationship management systems for support ticket tracking, email delivery services for transactional and marketing communications, and payment processing partners for transaction facilitation. Each third-party provider is contractually obligated to protect your data in accordance with this privacy policy and applicable data protection laws. They are permitted to process your data only for the specific purposes we have authorized and are prohibited from using it for their own independent purposes. We regularly audit our third-party partners to ensure ongoing compliance with our security and privacy standards. We may also share data with law enforcement or regulatory authorities when required by law, court order, or to protect the rights, safety, and property of ConvergePay, our merchants, or the public.

Protecting your personal information is a top priority at ConvergePay. We implement industry-standard technical and organizational security measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction. Our security infrastructure includes TLS 1.3 encryption for all data transmitted between your browser and our servers, AES-256 encryption for data at rest, multi-factor authentication for account access, role-based access controls that limit employee access to personal data on a need-to-know basis, and continuous intrusion detection and prevention systems. We conduct regular penetration testing and vulnerability assessments performed by independent security firms. Our team undergoes annual security awareness training, and we maintain an incident response plan that enables rapid detection, containment, and notification in the unlikely event of a data breach. While no system is completely immune to security threats, we are committed to maintaining the highest standards of data protection and continuously improving our security posture.

ConvergePay services are designed for business use and are not intended for individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from children under 13 years of age, or under 16 years of age in jurisdictions where applicable laws set a higher age threshold. If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take immediate steps to delete that information from our servers and records. Parents or guardians who believe that their child may have provided personal information to ConvergePay without their consent should contact us immediately at info@conevrgepaycom.com, and we will work promptly to investigate and remove any such data. We encourage parents and guardians to monitor their children's online activities and to educate them about safe internet practices.

ConvergePay reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you through prominent notice on our website, email notification to the address associated with your account, or in-app notification within your merchant dashboard — at least 30 days before the changes take effect. The 'Last Updated' date at the top of this policy indicates when the most recent revisions were published. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of ConvergePay services after any modifications to this policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may close your account and discontinue use of our services. Previous versions of this policy are available upon request by contacting info@conevrgepaycom.com.