Last updated: 24 Sep 2026
When a business uses the service, the business is the controller of its customer data and we are the processor.
We process customer contact details and card transactions only to run the program the business configured.
Hosting, message delivery and wallet providers. The current list is available on request and changes are announced before they take effect.
Encryption in transit, hashed keys and tokens, tenant isolation enforced in one place, and an audit log of every administrative action.
On request, or within 30 days of an account closing, customer data is erased and the ledger is anonymised.
Questions about this document go to [email protected].