Privacy Policy

Account: your name, email address and password. Passwords are stored only as a salted hash and cannot be read by us or recovered.

Business profile: business name and type, trading address, business and personal phone numbers, optional website, and a logo if you upload one.

Payout details: covered separately below, because we treat it differently.

For bank withdrawals we ask for your routing number, account number, account type and a taxpayer identifier. We validate these when you submit them and then discard the account number and the identifier. We store only the routing number, the last four digits of the account, and the last four digits of the identifier. This means we cannot reconstruct your full account number, and neither can anyone who obtains a copy of our database.

For debit card payouts we must retain the card number in order to send funds to it. It is encrypted with AES-256-GCM before storage, is never displayed in your dashboard, and is decrypted only at the moment a payout is being processed. Every decryption is logged with the identity of the person who performed it. We never ask for and never store a card security code.

Transaction records — amount, fee, currency, description, status and timestamps. Receipt records. Payout records. An audit log of significant account actions, including the IP address they came from.

We do not run advertising trackers and we do not sell data to anyone, for any purpose.

Your customers enter their card details on our payment processor's secure checkout page, not on EYAPAY. We never see, receive or store your customers' card numbers. We receive only a confirmation that a payment succeeded, the amount, and an optional email address if the customer chose to provide one for a receipt.

• Whop, our payment processor, to create and settle payments.
• Neon, our database host, and Vercel, our application host and file storage provider.
• Law enforcement or regulators where we are legally required to.

Transaction and payout records are retained for seven years to meet financial record keeping obligations. Your profile is retained while your account is open. If you close your account we delete your profile and logo but keep the transaction records for that seven year period.

You can access and correct most of your data directly in settings. You can request a copy of everything we hold, or ask us to delete it, from the support page. Where we must keep records for legal reasons we will tell you which records and why.

All traffic is encrypted in transit. Sensitive fields are encrypted at rest. Access to the payout administration area is restricted to a fixed list of authorised addresses, and every sensitive action is logged. No system is perfectly secure, which is precisely why we chose not to store bank account numbers at all.

Privacy questions and data requests can be raised from the support page.