Privacy Policy

MerchantDesk Inc. ("MerchantDesk", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our Services.

We collect information in the following categories:

• Account information: name, email address, and authentication credentials provided during registration.
• Profile information: business name, store URL, and support preferences you configure.
• Usage data: pages visited, features used, session duration, and interaction logs.
• Communications: messages, forum posts, replies, and support tickets submitted through our platform.
• Technical data: IP address, browser type, device identifiers, and operating system.
• Payment information: billing details processed securely through our payment provider (we do not store card numbers).

We use the information we collect to:

• Provide, operate, and maintain our Services.
• Process transactions and send related information including confirmations and invoices.
• Send administrative information such as changes to terms, conditions, and policies.
• Respond to comments, questions, and requests and provide customer support.
• Monitor and analyze usage patterns to improve our Services.
• Detect, prevent, and address technical issues and fraudulent activity.
• Comply with legal obligations and enforce our agreements.

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service providers: trusted third-party vendors who assist in operating our platform (hosting, analytics, payment processing) under strict confidentiality agreements.
• Legal requirements: when required by law, subpoena, or other legal process.
• Business transfers: in connection with a merger, acquisition, or sale of all or a portion of our assets.
• With your consent: for any other purpose with your explicit consent.

We retain your personal information for as long as your account is active or as needed to provide Services. You may request deletion of your account and associated data at any time by contacting us. We will respond within 30 days and delete or anonymize your data unless retention is required by law.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and role-based access controls. While we strive to protect your information, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing of your data for certain purposes.
• Restriction: request restriction of processing in certain circumstances.

To exercise any of these rights, please contact us using the details below.

We use cookies and similar tracking technologies to enhance your experience. Please review our Cookie Policy for detailed information on how we use cookies and how you can control them.

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we will provide notice via email or a prominent notice on our platform.