Privacy Policy

Last Updated: September 17, 2025

1. Introduction

Gateway Integrations ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment processing services and communication systems, including SMS and voice communications.

2. Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number, mailing address)
• Business information (company name, tax ID, business type)
• Financial information (bank account details, payment card information)
• Transaction data and payment history
• Technical information (IP address, browser type, device information)
• Communication data (SMS opt-in preferences, phone numbers, communication history)

Automatically Collected Information

We automatically collect certain information when you use our services, including:

• Log data and usage patterns
• Device and browser information
• Location information (if permitted)
• Cookies and similar tracking technologies
• SMS delivery confirmations and carrier information

3. How We Use Your Information

We use your information to:

• Process payments and transactions
• Provide customer support and technical assistance
• Verify your identity and prevent fraud
• Comply with legal and regulatory requirements
• Improve our services and develop new features
• Send important notices and updates about our services
• Conduct risk management and security monitoring
• Send SMS notifications, alerts, and promotional messages (with your consent)
• Make voice calls for customer service and verification purposes
• Maintain communication preferences and consent records

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in our operations (including SMS/voice service providers like Twilio)
• Legal Requirements: When required by law or to protect our rights and interests
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Fraud Prevention: With fraud prevention services and financial institutions
• Consent: When you provide explicit consent for sharing

5. Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL encryption for data transmission
• PCI DSS Level 1 compliance for payment data
• Secure data centers with physical access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy
• Multi-factor authentication for account access
• End-to-end encryption for SMS communications
• Secure telecommunication partnerships with verified carriers

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Prevent fraud and maintain security

Personal information is typically retained for 7 years after account closure, or as required by applicable law. SMS consent records are maintained for a minimum of 4 years as required by TCPA regulations.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access to your personal information
• Correction of inaccurate information
• Deletion of your information (subject to legal requirements)
• Restriction of processing
• Data portability
• Opt-out of marketing communications
• Opt-out of SMS communications at any time by texting "STOP"
• Request help with SMS services by texting "HELP"

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and collect usage information. You can control cookie settings through your browser preferences, though this may affect service functionality.

9. Third-Party Links

Our services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. Our SMS and voice communication services require users to be 18 or older and authorized to use the provided phone number.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers. SMS and voice communications may be routed through international telecommunications networks, all of which maintain appropriate security standards.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes through our website, email, or SMS (if you have opted in). Continued use of our services constitutes acceptance of the updated policy.