Privacy Policy
Last updated: May 27, 2025
Your privacy is important to us.
1. Data We Collect
1.1. Merchants: Upon registration, we collect your personal details (name, email address and profile image through your Google account), details about your business (through Stripe Connect), and information about the service(s) you will use with Small Transfers (name, website, callback URL). We also store information about the charges you add to your customers' accounts, and information about the transfers to you.
1.2. Customers: Upon registration, we collect your personal details (name, email address and profile image through your Google account). We also store information related to your authorizations and usage of Small Transfers services, basic information about your payment methods (card type, last 4 digits, expiration date), and information about the payments.
1.3. Website Visitors: We use tools like Google Analytics and LogRocket to collect website analytics and session logs. We make every effort to follow the laws regarding such data collection.
2. How We Use Your Data
2.1. Merchants: We use the information you provided during onboarding for Know Your Business purposes (performed by Stripe). In addition, we use your name and email to send you transactional emails related to the service provided to you. The name and the website of your service(s) are shown to customers on the authorization screen for your service. We use the information about your the charges you add to your customers' accounts to determine the Customer payment amounts and the transfer amounts to you. If you subscribe to our newsletter, we may occasionally send you emails; you can unsubscribe anytime.
2.2. Customers: We use your name and email to send you transactional emails related to your account and the service(s) you authorized. We use information about your usage of the Merchants' services to determine how much you owe. We use your payment methods to charge you for you usage. When you authorize a merchant, they are given your name and your email address. If you subscribe to our newsletter, we may occasionally send you emails; you can unsubscribe anytime.
2.3. Website Visitors: We use the analytics and session logs to improve our website and services.
3. Data Sharing
3.1. Postmark: We use a third-party service for sending both transactional and newsletter emails. Your email address is not shared with other third parties or used for any other purpose.
3.2. Stripe: We use an external service for processing payments. We don't store or see your full card details — they are securely handled by our payment provider.
3.3. Google Analytics: We use a third-party service for website analytics. Your information is anonymized.
3.4. LogRocket: We use a third-party service for session logs. We may link your name and email to specific session logs to better understand what happened in a specific session.
4. Data Protection
4.1. Storage: The data is stored in a secure cloud database. We use industry best practices to protect your data from unauthorized access.
4.2. Servers: Our service is hosted on a secure cloud infrastructure.
4.3. Google APIs: The use of information received from Google APIs adheres to the Google API Services User Data Policy. We use the information obtained from Google APIs only as described in this document.
4.4 Compliance: We comply with major privacy regulations, including GDPR and CCPA, ensuring your data rights are respected and upheld.
5. Your Rights
5.1. You have the right to request a copy or removal of your data stored with us. Contact us to make a request.
5.2. You can at any time.
6. Updates
6.1. We may update this policy from time to time. Any significant changes will be communicated to you.
7. Questions
7.1. For questions about this policy, please contact us.