Privacy Policy
Last Updated: October 22, 2025
1. Introduction
Welcome to OctaPay. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our services, and tell you about your privacy rights and how the law protects you.
2. Data We Collect
We may collect, use, store and transfer different kinds of personal data about you, including:
- Identity Data: First name, last name, username, company name
- Contact Data: Email address, telephone number, billing address
- Financial Data: Bank account details, payment card details (securely processed via PCI-DSS compliant systems)
- Transaction Data: Details about payments to and from you, and other details of services you have purchased
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Information about how you use our website and services
3. How We Use Your Data
We use your personal data for the following purposes:
- To process and complete your payment transactions
- To manage your account and provide customer support
- To comply with legal and regulatory requirements
- To detect and prevent fraud and unauthorized access
- To improve our services and develop new features
- To send you important service updates and notifications
- To provide personalized content and recommendations (with your consent)
4. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. All payment data is encrypted using industry-standard AES-256 encryption and we are PCI-DSS Level 1 certified.
5. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain transaction data for 7 years to comply with financial regulations.
6. Your Legal Rights
Under data protection laws, you have the following rights:
- Access: Request access to your personal data
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Objection: Object to processing of your personal data
- Restriction: Request restriction of processing your personal data
- Portability: Request transfer of your personal data to another party
- Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
7. Third-Party Services
We may share your data with trusted third-party service providers who assist us in operating our platform, such as payment processors, fraud detection services, and hosting providers. All third parties are required to maintain the confidentiality and security of your personal data.
8. International Transfers
Your data may be transferred to and stored in countries outside your country of residence. We ensure that all international transfers comply with applicable data protection laws and implement appropriate safeguards such as Standard Contractual Clauses.
9. Cookies
We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.
11. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
- Email: privacy@ledgepay.com
- Address: OctaPay Inc., 123 Payment Street, Financial District, NY 10004, USA