Paystri Privacy Policy
Paystri, Inc., a Delaware corporation along with its affiliates, service providers, agents, and designees (“we,” “us,” or “Paystri”) respect your privacy and are committed to protecting the privacy of your personal information. We have strict policies (this “Privacy Policy”) to ensure that the privacy of your personal information is protected while still enabling you to make use of our application, Paystri Cash Discount (the “App”). This Privacy Policy explains how Paystri collects, uses, discloses, and otherwise processes personal data on behalf of our customers – typically, business entities (any such entity a “Merchant”) – in connection with the App, which runs on the Clover Network Inc. (“Clover”) Point-of-Sale system (“Clover POS”).
This Privacy Policy does not apply to Paystri’s privacy practices in any other context. Paystri’s processing of personal data in connection with its provision of the App is governed by this Privacy Policy and Paystri’s respective agreements with Merchants (“Paystri Customer Agreements”). If any conflict between this Privacy Policy and a Paystri Customer Agreement occurs, the Paystri Customer Agreement will control to the extent permitted by applicable law. This Privacy Policy is not a substitute for any privacy policy that a Merchant may be required to provide to its customers, personnel, or other individuals.
Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, you may not use the App. By accessing or using the App, you agree to this Privacy Policy and any amendments or revisions thereto.
Information Paystri Collects
As a result of the App’s integration with the Clover POS, we may collect personal data from or on behalf of Merchants. Merchants determine the scope of the personal data transferred to us or that we collect, and the information we receive may vary by Merchant. Typically, the information we collect on behalf of Merchants includes:
Information that we Collect when a Customer for a Merchant Makes a Payment
When a Merchant’s customer (“Customer”) makes a payment to Merchant via a Clover POS, we collect information about the transaction through the App’s integration with the Clover POS, which may include personal data. Information about transactions includes the payment card used, name associated with the payment card, the location of the Merchant’s store, date and time of the transaction, transaction amount, and information about the goods or services purchased in the transaction (“Customer Payment Information.”)
Additional Information Provided by a Customer Ancillary to Payment through the Clover POS
We may collect additional information ancillary to a Customer’s payment through the Clover POS. This information may include:
- Customer’s email address or phone number, such as when the Customer chooses to receive an electronic receipt.
- Customer’s marketing preferences, such as whether the Customer wishes to receive marketing communications or newsletters.
- Information about participating Customers’ activity in a Merchant loyalty program.
- Customer’s physical address, where needed for delivery of goods or services; and
- Other information Customer may provide, such as birthdate, interests or preferences, reviews, and feedback, as applicable (“Customer Ancillary Information” and with Customer Payment Information collectively referred to herein as “Personal Information.”)
We do not collect any other Personal Information.
Additional Information Provided by Merchants to Paystri about Customers or personnel
Merchants may also provide us with additional information directly, via access they grant to us, or otherwise. The types of information that Merchants may provide to Paystri about their Customers may include email addresses, phone numbers, and purchase history.
Information Collected from Minors
While the App is not intended for use by minors, we acknowledge that individuals under the age of 18 may use the App. In such cases, we may inadvertently collect personal information from minors, including but not limited to email addresses, names, payment card information, addresses of where payments were made, date and time of transactions, transaction amounts, and consumers' marketing preferences. We take immediate steps to delete any such information upon discovery. Parents or legal guardians have the right to review, request, or delete their child's information by contacting us through the provided contact information as indicated below. We are committed to complying with applicable privacy laws and regulations and ensuring the privacy and security of all user data, as outlined in the section below titled “Data Collection from Minors.”
How Paystri Uses the Information it Collects
Paystri uses the Personal Information we collect for or on behalf of Merchants, to provide our services and the functionality of the App.
We may also use personal data for related internal purposes, including:
- To provide information about the App, such as important updates or changes to the App and security alerts.
- To measure performance of and improve the App; and
- To respond to inquiries, complaints, and requests for Customer support.
How Paystri Shares Information
Paystri may share Personal Information that it collects with:
- The Merchant from whom or on whose behalf Paystri collected the Personal Information.
- The platform on which the App runs, the Clover POS. You may view Clover’s Privacy Notice here, which is incorporated herein.
- With third parties as a Merchant may direct.
- With third party service providers that help us manage and improve the App; and
- With Paystri subsidiaries and corporate affiliates for the purposes described in this Privacy Policy or as outlined in our agreement(s) with a Merchant.
Paystri may disclose Personal Information to government or law enforcement officials or private parties as required by law, and disclose and use such information as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal processes, such as to respond to subpoenas or requests from government authorities; (b) enforce the terms and conditions that govern the App; (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
Paystri may sell or transfer some or all of its business or assets, including your personal data, in connection with a business transaction (or potential business transaction) such as a merger, consolidation, acquisition, reorganization or sale of assets or in the event of bankruptcy, in which case we will make reasonable efforts to require the recipient to honor this Privacy Policy.
Use of Cookies
Paystri’s web applications may use cookies for functionality and performance. Cookies are not used to collect any private or identifying information about a Merchant or Customer.
We also encourage you to visit the Network Advertising Initiative and/or the Digital Advertising Alliance’s Self-Regulatory Program for Online Behavioral Advertising for information about opting out of seeing targeted digital advertisements related to cookies.
Data Collection from Minors
We recognize the importance of protecting privacy where children are involved. We do not knowingly collect personal information online from children under the age of 13. If a child under the age of 13 has provided us with personal information online, we ask that a parent or guardian call Customer Success at 978.744.9090 and we will delate that information from our systems. We are committed to complying with all applicable laws and requirements, such as the U.S. Children’s Online Privacy Protection Act (“COPPA”). We take additional steps to protect children’s privacy, including:
- Notifying parents about our information practices with regard to children, including the types of Personal Information we may collect from children, the uses to which we may put that Personal Information, and whether and with whom we may share that Personal Information.
- In accordance with applicable law and our practices, obtaining consent from parents for the collection of Personal Information from their children, or for sending Personal Information about Paystri’s products and services directly to their children.
- Limiting Paystri’s collection of Personal Information from children to no more than is reasonably necessary to participate in an online activity; and
- Giving parents access or the ability to request access to the Personal Information we have collected from their children and the ability to request that the Personal Information be changed or deleted.
This policy is in accordance with COPPA and outlines our practices in the United States regarding children’s Personal Information. For more information about COPPA and general tips about protecting children’s online privacy, please visit OnGuard Online.
Your Rights and Choices
Data Subject Rights
To the extent that applicable law provides individuals with rights pertaining to their Personal Information, such as to review and request changes to their Personal Information, individuals should contact the Merchant with any requests pertaining to the Merchant’s use of the App. To the extent that Clover is responsible for responding to data subject rights requests under applicable law, individuals may contact Clover with applicable requests as explained in Clover’s Privacy Notice at: Clover Privacy Notice. Paystri will assist a Merchant, or Clover, as applicable, in responding to such requests subject to our contract with a Merchant or Clover.
Complaints
If you have a complaint about Paystri’s handling of your personal data, you may contact us via the contact information provided below.
Updates to Privacy Policy
Paystri reserves the right to modify this Privacy Policy at any time. We recommend checking this page periodically to stay informed about any changes to the Privacy Policy. Your continued use of the App after any updates signifies your acceptance of the revised terms. In the event of significant changes to this Privacy Policy, we may, but are not obligated to, provide advance notice in writing.
Access to your information
Paystri strives to keep your Personal Information accurate. We provide access to the Personal Information we collect online from you so that you may review, update, amend, correct, or delete it. If you choose to delete it, we will use reasonable efforts to remove your Personal Information from our files, as required by applicable law. To protect your privacy and security, we also will take reasonable steps to verify your identity before granting you access. You may at any time contact Paystri with any privacy questions or concerns you may have, ask to see the personal data you have on file, and request a correction or deletion via email at: service@paystri.com
Contact us
You may contact us with any questions, comments, or complaints, about this Privacy Policy or our privacy practices via:
Paystri, Inc.
978.744.9090
Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware without regard to conflict of laws hereof.
Your California Privacy Rights
As a California resident, if applicable, you have the rights listed below. However, these rights are not absolute, and we may decline your request as permitted by the California Consumer Privacy Act (“CCPA”) as amended.
- Information. You can request the following information about how we have collected and used your Personal Information during the past twelve (12) months:
- The categories of Personal Information that we have collected.
- The categories of sources from which we collected Personal Information.
- The business or commercial purpose for collecting and/or selling Personal Information.
- The categories of third parties with whom we share Personal Information.
- Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of recipient.
- Whether we’ve sold your Personal Information; and, if so, the categories of Personal Information received by each category of recipient.
Upon receipt of a verifiable consumer request, and as required by the CCPA, Paystri will provide a response to such requests. Any disclosures Paystri provides will only cover the 12-month period preceding the receipt of your verifiable consumer request. With respect to Personal Information collected on and after January 1, 2022, and to the extent expressly required by applicable regulation, you may request that such disclosures cover a period beyond the twelve (12) months referenced above, provided doing so would not require a disproportionate effort by Paystri.
- Access and Correction. You can request a copy of the Personal Information that Paystri maintains about you. You have the right to request that Paystri correct any inaccurate Personal Information it maintains about you, considering the nature of that information and purpose for processing it. Upon receipt of a verifiable consumer request, and as required by the CCPA, Paystri will provide a response to such requests.
- Deletion. You have the right to request that Paystri deletes any of your Personal Information that it has collected from you and retained, subject to certain exceptions. Once Paystri receives and confirms your verifiable consumer request, we will delete (and direct our service providers and contractors, as applicable, to delete) your Personal Information from our records, unless an exception applies.
- Paystri may deny your deletion request if retaining the information is necessary for it or its service provider(s) to:
- Complete the transaction for which the Personal Information was collected, provide a good or service requested by you, or reasonably anticipated by you within the context of our ongoing business relationship with you, or otherwise perform a contract between Paystri and you;
- Help to ensure the App’s security and integrity to the extent the use of the consumer’s Personal Information is reasonably necessary and proportionate for those purposes;
- Debug to identify and repair errors that impair the App’s existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code;
- To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with Company and compatible with the context in which the consumer provided the information;
- Comply with a legal obligation; and
- Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
- Paystri may deny your deletion request if retaining the information is necessary for it or its service provider(s) to:
- Nondiscrimination. You are entitled to exercise the rights described above free from discrimination. This means that Paystri will not penalize you for exercising your rights by taking actions such as by denying you goods or services, increasing the price/rate of goods or services, decreasing the service quality, or suggesting that we may penalize you as described above for exercising your rights. However, the CCPA allows Paystri to charge you a different price or provide a different service quality if that difference is reasonably related to the value of the Personal Information, it is unable to use.
- Right to Opt-Out of Sale/Sharing. You have the right to opt-out of the sale/sharing of your Personal Information by Paystri, if any, by emailing us at service@paystri.com
- Right to Limit Use and Disclosure. You have the right to limit the use or disclosure of your sensitive Personal Information to only the uses necessary for Paystri to provide goods or services to you. Paystri will not use or disclose your sensitive Personal Information after you have exercised your right unless you subsequently provide consent for the use of your sensitive Personal Information for additional purposes.
The above rights are subject to various exclusions and exceptions under applicable laws. To exercise the rights described above, please submit a verifiable consumer request to Paystri as indicated below. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. Paystri endeavors to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to ninety (90) days), Paystri will inform you of the reason and extension period in writing. Any disclosures Paystri provides will only cover the 12-month period preceding the verifiable consumer request’s receipt, except as provided above or as required under the CCPA. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, Paystri will select a format to provide your Personal Information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance. Data portability request format will be determined upon request.
California Civil Code Section 1798.83, known as the “Shine The Light” law, permits Paystri customers who are California residents to request and obtain from Paystri a list of what Personal Information (if any) Paystri disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once a year and are free of charge. Under Section 1798.83, Paystri currently does not share any Personal Information with third parties for its direct marketing purposes.
- How to Exercise your Rights
You may exercise your California privacy rights as follows:
- Right to Information, Access, and Deletion
Paystri is exclusively an online business. You can request to exercise your information, access, and deletion rights by sending an email to: service@paystri.com
- Identity Verification. The CCPA requires Paystri to verify the identity of the individual submitting the request before providing a substantive response to the request. A request must be provided with sufficient detail to allow us to understand, evaluate and respond. The requester must provide sufficient information to allow us to reasonably verify that the individual is the person about whom we collected information. A request may also be made on behalf of your child under 13. Paystri cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.
- Authorized Agents. California residents can empower an “authorized agent” to submit requests on their behalf. Paystri may require the authorized agent to have a written authorization confirming that authority. However, these steps are not required when you have provided the authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465. We reserve the right to deny requests from persons or businesses claiming to be authorized agents that do not submit sufficient proof of their authorization.
- Sale of Personal Information
We do not sell, as defined under CCPA, your Personal Information to third parties. In the preceding twelve (12) months, Paystri has not sold any Personal Information.
- Personal Information that we Collect, Use and Share
The chart below summarizes Paystri’s collection, use and sharing of Personal Information during the last twelve (12) months before the effective date of this Privacy Policy. We describe the sources through which Paystri collects your Personal Information in the sections above and describe the purposes for which we collect, use, sell and share this information, if at all, in the sections above titled “How we use the information we collect” and “How we share information.”
Category (see the glossary below for definitions) |
Do we collect this information? |
Do we share this information for business purposes? |
Identifiers |
No |
No |
Online Identifiers |
No |
No |
Protected Classification Characteristics |
No |
No |
Commercial Information |
No |
No |
Biometric Information |
No |
No |
Internet or Network Information |
No |
No |
Geolocation Data |
No |
No |
Sensory Information |
No |
No |
Professional or Employment Information |
No |
No |
Education Information |
No |
No |
Inferences |
No |
No |
Financial Information |
No |
No |
Medical Information |
No |
No |
Glossary Category |
Definition |
Categories of Personal Information |
Date Elements within the Category |
Biometric Information |
An individual’s physiological, biological or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish an individual’s identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a face print, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information. |
Transaction History |
Products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Financial Information |
Bank account number, debit or credit card numbers, insurance policy number, and other financial information. |
Geolocation Data |
Precise location, e.g., derived from GPS coordinates or telemetry data. |
Identifiers |
Real name, alias, postal address, unique personal identifier, customer number, email address, account name other similar identifiers. |
Government-issued ID |
Social security number, driver’s license, passport, or other government-issued ID, including an ID number or image. |
Medical Information |
Personal information about an individual’s health or healthcare, including health insurance information. |
Internet or Network Information |
Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement. |
Online Identifiers |
An online identifier or other persistent identifier that can be used to recognize a person, family or device, over time and across different services, including but not limited to, a device identifier; an Internet Protocol address; cookies, beacons, pixel tags, mobile ad identifiers, or similar technology; customer number, unique pseudonym, or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers (i.e., the identification of a person or a device to a degree of certainty of more probable than not) that can be used to identify a particular person or device. |
Physical Description |
An individual’s physical characteristics or description (e.g., hair color, eye color, height, weight). |
Professional or Employment Information |
Information relating to a person's current, past or prospective employment or professional experience (e.g., job history, performance evaluations), and educational background. |
Protected Classification Characteristics |
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
Sensory Information |
Audio, electronic, visual, thermal, olfactory, or similar information. |