Privacy Policy

This Privacy Policy explains how Paytree (“Paytree,” “we,” “us,” or “our”) collects, uses, and shares information about you when you visit our website, contact us, or use our services. Paytree is a software solutions provider that enables merchants to access multiple payment gateways through a single integration. We are not a payment service provider and do not provide merchant accounts or acquiring services.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), Paytree is the data controller for personal information collected through this website. When we process payment-related data on behalf of our merchant customers, we act as a data processor and handle that data according to our agreements with them.

You can reach us about privacy matters through our contact form.

We collect the following categories of information:

• Information you provide. When you complete a contact or demo form, message us, or sign up, we collect details such as your name, work email, company name, and the contents of your message.
• Usage and device data. We automatically collect information such as your IP address, browser type, device information, pages viewed, and the dates and times of your visits.
• Cookies and similar technologies. We use cookies and similar technologies to operate the site, remember your preferences, and understand how the site is used. See the Cookies section below.
• Transaction metadata. Where merchants use our services, we may process transaction metadata (such as amounts, currencies, provider responses, and routing outcomes) on their behalf as a processor.

We use the information we collect to:

• respond to your enquiries and provide support;
• operate, maintain, and improve our website and services;
• provide payment orchestration, routing, reporting, and related features to merchant customers;
• monitor for, detect, and prevent fraud, abuse, and security incidents;
• send you service updates and, where permitted, relevant information about our products; and
• comply with our legal and regulatory obligations.

Where the GDPR applies, we rely on the following legal bases: performance of a contract, your consent, our legitimate interests in operating and improving our business, and compliance with legal obligations.

We use strictly necessary cookies to make the site work and, where permitted, analytics cookies to understand usage and improve the experience. You can control cookies through your browser settings; disabling some cookies may affect how the site functions.

We do not sell your personal information. We may share it with:

• Service providers that help us operate our website and services (for example, hosting, analytics, and communications providers), under appropriate confidentiality and data protection terms;
• Payment providers that merchants connect through Paytree, as needed to route and process transactions;
• Authorities or third parties where required by law, regulation, or legal process, or to protect our rights, users, or the public; and
• A successor entity in connection with a merger, acquisition, or sale of assets.

We keep personal information only for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting, or reporting requirements. When information is no longer needed, we delete or anonymise it.

Your information may be processed in countries other than the one in which you live. Where we transfer personal data outside the European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses to protect that data.

We maintain technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal information, to object to processing, to data portability, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, get in touch through our contact form. We will respond in line with applicable law.

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.

Our website may link to third-party sites and services that we do not control. This policy does not apply to those sites, and we encourage you to review their privacy practices.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated where appropriate.

If you have questions about this Privacy Policy or how we handle your information, reach out through our contact form.