VerdPay logo

Legal

Privacy Policy

Last updated: December 21, 2025

Data minimization & what we collect

  • Essential account data you provide (name, email, phone) for onboarding and verification.
  • Wallet, funding, payment, loyalty, and settlement events necessary to operate the service.
  • Security and fraud signals (device, IP, usage patterns) to protect accounts.
  • Bank account ownership and verification data processed via Plaid; ACH/payment metadata processed via Straddle.

What we do NOT retain

  • We do not retain raw bank credentials. Plaid uses tokens to authorize access.
  • We do not keep full payment instrument details beyond what is required for ACH/settlement records.
  • We minimize personally identifiable data and keep only what is needed for compliance, fraud prevention, and required records.

How we use data

  • Operate buyer wallets, merchant settlements, loyalty, and notifications.
  • Verify identity and account ownership (via Plaid and Straddle) and mitigate fraud/abuse.
  • Provide support, service communications, and reliability/analytics to improve performance.

Sharing and processors

  • Plaid for bank account linking and verification; we receive tokens and limited account metadata.
  • Straddle for ACH orchestration, payouts, KYC/KYB, and risk checks related to payments and settlements.
  • SMS/email providers for transactional messages; infrastructure and analytics providers for security and uptime.
  • We do not sell personal data.

Security & retention

  • Role-based access; encryption in transit and at rest; least-privilege operational access.
  • Retention is limited to what is required for regulatory, fraud, tax, and accounting obligations; data is deleted or anonymized thereafter.
  • Incident response and audit logging are in place to monitor access and changes.

Your choices & rights

  • You may request access, correction, or deletion of your data where permitted by law and consistent with retention obligations.
  • You can update notification preferences in-app; you can request account deactivation via support.
  • For bank accounts, you may revoke Plaid-linked access via your financial institution or within the app.

International & regulatory

  • Data may be processed in the U.S. by our infrastructure providers and processors.
  • We comply with applicable laws and will cooperate with lawful requests consistent with our policies.

Updates

  • We may update this Privacy Policy as services or regulations change.
  • Material updates will be communicated in-app or by email; continued use after notice means you accept the changes.