Privacy Policy

This Privacy Policy explains how Fluxpay (“Fluxpay”, “we”, “us”) collects, uses, and shares information when you visit fluxpaywave.com, create an account, or use our payment APIs. We aim to collect the minimum we need to run a secure, reliable payments platform.

Depending on how you interact with us, we may collect the following categories of information:

• Account data — name, work email, company, and login credentials.
• Integration data — API keys, webhook endpoints, and configuration you set up.
• Transaction metadata — amounts, currencies, timestamps, and statuses.
• Technical data — IP address, device and browser type, and request logs.
• Communications — messages you send to support, sales, or partnerships.

We process this information to:

• Provide, maintain, and improve the payments platform.
• Authenticate accounts and prevent fraud and abuse.
• Route and respond to your support and sales requests.
• Send service notices, security alerts, and (where permitted) product updates.
• Comply with legal, tax, and financial-reporting obligations.

Fluxpay is designed so that sensitive cardholder data is tokenized at the edge and never touches your servers. We handle card numbers within a PCI-DSS scoped environment and expose only non-sensitive tokens to your application. We do not store full card numbers, CVV values, or magnetic-stripe data on systems you control.

We use strictly necessary cookies to keep you signed in and to secure requests. With your consent, we may use privacy-respecting analytics to understand aggregate usage. You can control non-essential cookies through your browser settings or our cookie banner.

We share data with vetted sub-processors — such as cloud infrastructure, card networks, banking partners, and fraud-scoring providers — strictly to deliver the service. Each is bound by contractual confidentiality and security obligations. We do not sell your personal information.

Your information may be processed in countries other than your own. Where required, we rely on recognized transfer mechanisms (such as standard contractual clauses) to protect data moved across borders.

We keep personal data only as long as needed to provide the service and to meet legal, accounting, or reporting requirements. Transaction records are typically retained for the period mandated by applicable financial regulations, after which they are deleted or anonymized.

We protect data with encryption in transit and at rest, scoped access controls, audit logging, and regular reviews. No method of transmission is perfectly secure, but we work to align our practices with industry standards.

Subject to your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below; we may need to verify your identity first.

Fluxpay is a business-facing product and is not directed to children. We do not knowingly collect personal information from anyone under 16.

Questions about this policy or your data? Email us at [email protected] and we’ll respond within a reasonable timeframe.