Privacy Policy

This Privacy Policy explains how [Legal Entity Name], doing business as “BDRelay” (“BDRelay,” “we,” “us,” or “our”), collects, uses, and shares information about you when you visit our website, communicate with us, or use our payment-integration service (collectively, the “Service”).

1. Scope of this policy

This policy applies to information about our business customers, their representatives, and visitors to our website. When your customers pay through a checkout we configure, their payment information is collected and processed by Stripe and, where applicable, by you as the merchant. BDRelay does not receive or store full payment card numbers.

2. Information we collect

We may collect the following categories of information:

• Business and contact information — your name, business name, email address, phone number, and role.
• Onboarding and verification information — details needed to set up your checkout and, where required, to support identity verification performed by Stripe (such as business type, website, and bank account details you provide).
• Communications — messages, support requests, and other correspondence you send us.
• Usage and device information — information about how you interact with our website, such as IP address, browser type, pages viewed, and referring URLs, collected through standard log files and, where used, cookies or similar technologies.
• Transaction metadata — high-level, non-card information about payments processed through your checkout (such as amount, currency, timestamp, and status) used to provide, support, and bill for the Service.

We do not collect or store full payment card numbers. Card data is collected and handled directly by Stripe.

3. Sources of information

We collect information directly from you (for example, during setup and support), automatically through your use of our website, and from service providers such as Stripe in connection with your connected account.

4. How we use information

• To set up, provide, maintain, and improve the Service;
• To configure and manage your checkout and connected account;
• To calculate and collect our platform fees;
• To communicate with you about setup, support, and service updates;
• To detect, prevent, and address fraud, security, and technical issues;
• To comply with legal obligations, including anti-money-laundering and “know your customer” requirements; and
• To protect our rights and the rights of our customers and their end users.

5. How we share information

We may share information with:

• Stripe, to enable payment processing, verification, and payouts through your connected account;
• Service providers that perform functions on our behalf (such as hosting, analytics, and communications), bound by confidentiality obligations;
• Legal and safety recipients, when we believe disclosure is required by law or reasonably necessary to protect rights, safety, or the integrity of the Service; and
• Successors, in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising.

6. Payments and Stripe

Payment processing is provided by Stripe. When you or your customers submit payment information, it is transmitted to and processed by Stripe under Stripe’s Privacy Policy. We encourage you to review Stripe’s policy to understand how it handles payment data.

7. Data retention

We retain information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of certain personal information we hold about you, and to limit certain uses of it. To exercise a right, contact us at hello@bdrelay.com. We will respond as required by applicable law and may need to verify your identity before acting on a request.

10. California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), gives you the right to:

• Know the categories and specific pieces of personal information we have collected about you;
• Request deletion of personal information, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the “sale” or “sharing” of personal information — note that we do not sell or share personal information as those terms are defined by the CCPA/CPRA; and
• Not be discriminated against for exercising your rights.

You may submit a request by emailing hello@bdrelay.com. You may use an authorized agent to submit a request on your behalf, subject to verification.

11. Children's privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice as required by law.

13. Contact

If you have questions about this Privacy Policy or our privacy practices, contact us at hello@bdrelay.com.