Privacy Policy

PRIVACY POLICY

Payments.Ai LLC

Last Updated: August 7, 2026

Payments.Ai LLC, a Delaware limited liability company (“Payments.Ai,” “we,” “us,” or “our”), acts as a technology provider and Merchant of Record, supplying secure online payment processing, checkout, billing, and related infrastructure to businesses (“Customers”) so that they can sell their products and services to their own customers (“End Customers”), in the United States and internationally. This Privacy Policy explains what personal information we collect through our website, dashboard, checkout, APIs, and related services (collectively, the “Services”), how we use and share it, and the choices and rights available to you. This Privacy Policy is incorporated by reference into our Terms of Service.

Who This Policy Covers. This Policy applies to (a) Customers who register for or use the Services; (b) individuals associated with a Customer’s business, such as owners, authorized representatives, and beneficial owners we identify through Verification Requirements; (c) End Customers who make a purchase through a checkout or billing flow powered by the Services; and (d) visitors to our website. It does not apply to Payments.Ai’s own job applicants or employees.

Summary. We do not sell your personal information to third parties, and we do not use your personal information for automated decision-making that produces legal or similarly significant effects concerning you. We share personal information with our Financial Partners, service providers, and as required by law, as described in Section 3 below.

1. Information We Collect

Information You or Your Business Provide to Us. When you register for or use the Services, we may collect:

• Account and Contact Information – name, business name, email address, phone number, mailing and business address, and login credentials.

• Identity and Business Verification Information (KYC/KYB) – government-issued identification, date of birth, Social Security Number or Taxpayer Identification Number (or the last four digits thereof), business formation documents, beneficial ownership information, and other information required to satisfy Verification Requirements under our Terms of Service.

• Financial and Payout Information – bank account and routing numbers, debit or credit card details for negative-balance recharges, and payout history.

• Offering and Transaction Information – the products, services, and pricing you list, and records of transactions processed through the Services.

• Communications – the content of messages you send to our support or compliance teams, and records of related correspondence.

Information We Collect About Your End Customers. When an End Customer completes a purchase through a checkout or billing flow powered by the Services, we collect the information necessary to process that transaction and to perform our Merchant of Record obligations, which may include the End Customer’s name, email address, billing and shipping address, and payment method details (which are generally tokenized or otherwise processed on our behalf, or that of Whop or our other Financial Partners, in accordance with applicable card network and data security standards, such as PCI DSS).

Information Collected Automatically. When you or an End Customer visits our website, dashboard, or checkout pages, we and our service providers may automatically collect certain information through cookies, pixels, and similar technologies, including IP address, device and browser type, operating system, referring and exit pages, and usage patterns. See Section 5 (Cookies and Similar Technologies) below.

Information from Other Sources. We may receive information about you from Whop and our other Financial Partners, identity verification providers, fraud-prevention services, credit bureaus, publicly available sources, and, where applicable, your own use of Third-Party Services connected to your account.

2. How We Use Information

We use the personal information we collect to:

• provide, operate, maintain, and improve the Services, including checkout, billing, subscriptions, and payouts;

• perform identity verification, satisfy Verification Requirements, and comply with know-your-customer (KYC), know-your-business (KYB), anti-money laundering (AML), and sanctions-screening obligations;

• act as Merchant of Record, including calculating, collecting, and remitting applicable sales tax, VAT, and GST, and issuing required tax forms (such as Form 1099-K in the United States);

• detect, investigate, and prevent fraud, unauthorized transactions, and other illegal activity, and to manage chargebacks and disputes;

• communicate with you about your account, transactions, and updates to our Services, policies, or this Privacy Policy;

• provide customer and technical support;

• enforce our Terms of Service and other policies, including our Prohibited Products and Services Policy;

• comply with applicable law, respond to legal process, and protect the rights, property, and safety of Payments.Ai, our Customers, End Customers, and others; and

• with your consent or as otherwise permitted by law, for any other purpose disclosed to you at the time of collection.

We do not use personal information to make decisions that produce legal or similarly significant effects concerning an individual on a fully automated basis, without an opportunity for human review.

3. How We Share Information

Whop and Other Financial Partners. Payments.Ai’s Services are built on Whop Inc.’s (“Whop”) commerce and payments infrastructure, and we use other payment processors, banks, and card networks to process transactions (together with Whop, our “Financial Partners”). We share the personal information described in Section 1 with our Financial Partners to the extent necessary to process transactions, satisfy Verification Requirements, and perform our obligations as Merchant of Record.

Service Providers. We share personal information with vendors and service providers that perform functions on our behalf, such as cloud hosting, identity verification, fraud prevention, tax calculation and filing, customer support tools, analytics, and email delivery. These providers are authorized to use personal information only as necessary to provide services to us.

Legal and Safety. We may disclose personal information where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Payments.Ai, our Customers, End Customers, or others, or to detect, prevent, or address fraud, security, or technical issues.

Business Transfers. We may disclose or transfer personal information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our assets, or in preparation for any of these events.

With Your Direction. We may share information with third parties when you direct us to do so, such as by connecting a Third-Party Service to your account.

No Sale of Personal Information. We do not sell personal information to third parties, and we have not sold personal information in the preceding twelve (12) months, as “sell” is defined under the California Consumer Privacy Act and similar state laws. We do not share personal information for cross-context behavioral advertising.

4. Data Retention

We retain personal information for as long as necessary to provide the Services, satisfy the purposes described in this Policy, and comply with our legal, tax, accounting, and regulatory obligations (including recordkeeping obligations imposed by our Financial Partners, card networks, and tax authorities, which in some cases require retention for several years after an account is closed or a transaction occurs). Where personal information is no longer needed for these purposes, we take reasonable steps to delete, anonymize, or securely dispose of it.

5. Cookies and Similar Technologies

We and our service providers use cookies, web beacons, and similar technologies to operate our website and dashboard, remember your preferences, understand how the Services are used, and, where applicable, measure the effectiveness of our marketing. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Services. We do not currently respond to browser “Do Not Track” signals.

6. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction, including encryption of sensitive data in transit and, where appropriate, at rest, and reliance on Financial Partners that maintain applicable card industry data security standards (such as PCI DSS) for payment card data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

Payments.Ai is based in the United States, and personal information we collect may be processed, stored, and transferred in the United States and other countries that may have data protection laws different from those in your country of residence. Where required by applicable law, we implement appropriate safeguards for cross-border transfers of personal information, such as standard contractual clauses.

EU/UK Representative. Pursuant to Article 27 of the GDPR (and the equivalent provision of the UK GDPR), you may contact our appointed representative for data protection matters at: IITR Datenschutz GmbH, Marienplatz 2, 80331 München, Germany, email@iitr.de, +49 89 18917360.

8. Your Privacy Rights

General Rights. Depending on your location, you may have the right to: request access to, or a copy of, the personal information we hold about you; request correction of inaccurate information; request deletion of your personal information; request that we restrict or object to certain processing; request a portable copy of information you provided to us; and withdraw consent where processing is based on consent. To exercise these rights, contact us at compliance@payments.ai. We will verify your request and respond within the time required by applicable law.

European Economic Area, United Kingdom, and Switzerland. If you are located in the EEA, UK, or Switzerland, our legal bases for processing personal information include performance of a contract, compliance with legal obligations (including AML/KYC requirements), our legitimate interests (such as fraud prevention and improving the Services), and, where applicable, your consent. You have the right to lodge a complaint with your local data protection authority.

California and Other U.S. State Privacy Rights. If you are a California resident, or a resident of another state with a comprehensive privacy law, you may have rights to know, access, correct, and delete your personal information, to opt out of the sale or sharing of personal information (which, as noted above, we do not engage in), and to be free from discrimination for exercising these rights. You may designate an authorized agent to submit a request on your behalf, subject to verification.

Brazil. If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD) similar to those described above, including the right to confirm the existence of processing, access, correction, anonymization, deletion, and portability of your personal information.

9. Children’s Privacy

The Services are intended for use by businesses and individuals who meet the eligibility requirements in our Terms of Service and are not directed to children. We do not knowingly collect personal information from children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction). If we learn that we have collected personal information from a child in violation of this Policy, we will take reasonable steps to delete it.

10. Third-Party Links and Services

The Services may contain links to, or integrate with, websites, products, or services operated by third parties, including Whop, other Financial Partners, and Third-Party Services you choose to connect to your account. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing them with personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices, the Services, or applicable law. If we make material changes, we will provide notice by updating the “Last Updated” date above and, where required by law, through additional notice (such as email or an in-app notification). Your continued use of the Services after a change takes effect constitutes your acceptance of the updated Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Payments.Ai LLC

Attn: Legal & Compliance Department

9169 W. State Street #800

Garden City, Idaho 83714

compliance@payments.ai