Privacy Policy

1. Who we are

AsherPay (“AsherPay,” “we,” “our,” or “us”) operates payment processing services for high-risk and high-growth merchants. This Privacy Policy explains how we handle personal information collected through our website, application portal, and merchant services.

2. Information we collect

2.1 Information you provide

• Application data. Business name, EIN, ownership structure, principal information (name, date of birth, address, government ID), industry, expected processing volume, and supporting documents (bank statements, processing statements, articles of incorporation).
• Contact information. Email address, phone number, mailing address.
• Communications. Messages you send to support, sales, or compliance.

2.2 Information collected automatically

• Technical data. IP address, browser type, device information, referring URLs, and pages visited.
• Cookies and similar. Used for session management, analytics, and to remember preferences.

2.3 Information from third parties

• Identity verification, fraud, and credit bureau services used to underwrite merchants.
• Acquiring banks, sponsor banks, card networks, and ACH originators that process transactions on your behalf.
• Public databases, sanction and watchlist screening providers (OFAC, MATCH).

3. How we use information

• Evaluate and approve merchant applications, including underwriting and risk decisions.
• Provide, operate, and improve payment processing, settlement, reporting, and support.
• Detect, prevent, and investigate fraud, chargebacks, and prohibited activity.
• Comply with legal obligations including AML, KYC/KYB, sanctions, and card brand rules.
• Communicate about your account, service updates, and (where permitted) marketing.

4. How we share information

We do not sell personal information. We share it only as needed to deliver our services and meet our obligations:

• Acquiring banks and sponsors who hold the merchant account and underwrite the relationship.
• Card networks (Visa, Mastercard, Amex, Discover) for transaction routing and dispute handling.
• Service providers for hosting, identity verification, fraud screening, customer support, and analytics, all under contractual confidentiality.
• Regulators and law enforcement when required by subpoena, court order, or applicable law.
• Successors in the event of a merger, acquisition, or asset sale.

5. Data retention

We retain personal information for as long as your account is active and for the period required by financial regulations (typically 5 years after account closure). Underwriting files and transaction records may be retained longer when required by card brand rules or regulatory authorities.

6. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. Cardholder data is processed under PCI DSS Level 1 standards. Access to sensitive data is restricted on a need-to-know basis and logged. No system is perfectly secure; if we learn of a breach affecting you, we will notify you as required by law.

7. Your rights

Subject to applicable law (including the GDPR, CCPA/CPRA, and similar regimes), you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion, subject to legal and regulatory retention requirements.
• Object to or restrict certain processing.
• Lodge a complaint with a data protection authority.

To make a request, email hello@asherpay.com. We may need to verify your identity before fulfilling a request.

8. Cookies

We use first- and third-party cookies for essential functionality, analytics, and performance. You can manage cookies through your browser settings. Disabling cookies may affect site functionality.

9. International transfers

AsherPay is based in the United States. If you access our services from outside the U.S., your information will be transferred to and processed in the U.S. and other jurisdictions where we or our service providers operate.

10. Children

AsherPay is for businesses and is not directed to children under 18. We do not knowingly collect personal information from minors.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision. Material changes will be communicated via email or in-app notice where appropriate.

12. Contact

Questions, requests, or complaints: hello@asherpay.com