Information you and others provide
We receive information from you, counterparties, connected services, and commercial information providers, including:
- Account and contact information, such as names, business names, contact details, and account identifiers.
- Invoice contents, commercial credit and trade information, payment history, and refund or dispute records. Business information may identify individual representatives.
- Communications and information provided through integrations you or your business connect.
Payment processors store payment credentials. We do not store full card numbers or bank account credentials. We receive payment references and transaction information and retain invoices and payment history. The processor’s own terms and privacy notice are identified in the connection or payment flow.
Automatically collected information
We collect technical and activity information, such as IP addresses, browser and device information, identifiers, pages visited, interactions, and access times. Cookies and similar storage technologies support sign-in, security, and preferences. Email tracking technologies, including pixels, indicate whether a message appears to have been opened.
Where enabled, session replay records clicks, scrolling, navigation, and timing to diagnose problems and improve usability. We mask text and inputs and exclude sensitive invoice, credit, payment, and account content before transmission. Recordings may still contain identifiers and activity data. We obtain consent where required by law.
How we use information
We use information to operate accounts, invoices, reminders, business payment terms, payments, refunds, and disputes. We maintain records, provide support, protect and improve the Services, meet legal obligations, and send and measure communications about our services. We do not use customer information to train AI models.
How we disclose information
We disclose information to the merchant or payer involved in the relevant relationship. A merchant can access its own customer records, which are not made available through other merchants’ accounts.
We disclose information as needed to providers supporting hosting, communications, payments, fee calculation, commercial information, session replay, and integrations. Other recipients may include professional advisers, authorities as legally required, parties to a business transfer, and persons involved in protecting rights and security.
We do not license personal information for third-party marketing or disclose it for other companies’ marketing. When processing for a merchant, we follow the applicable agreement and law. The merchant’s notice describes its own practices.
Retention
We generally retain necessary accounting and payment records for seven years after the transaction year. We keep payment authorization proof while effective and for at least two years after termination or revocation. Nonessential account information is deleted from active systems within 30 days after closure, routine support records after 12 months from resolution, and routine logs and backups within 90 days. Session replay recordings are deleted within 30 days of capture. Commercial reports follow provider permissions and their business purpose.
Law, valid privacy requests, or a permitted continuing purpose, such as an unresolved claim, may require different periods. We retain only necessary information, including privacy-request records for 24 months after completion and minimal preference records to honor your choices. Applicable deletions are reapplied before ordinary use of restored backups.
Security and processing locations
We use technical and organizational safeguards designed to protect personal information. No security system is completely secure. We operate from the United States. Information may be stored or accessed wherever we, our providers, and authorized personnel operate, including outside your state or country.
Your rights and choices
Contact support@perqia.com to request information about collection and disclosure, access or a portable copy, correction, or deletion. We verify identity for access, correction, and deletion as appropriate, consider exceptions, and meet legal deadlines. Opt-out requests do not require account creation or identity verification. We coordinate with merchants as needed, accept authorized agents as required, and do not discriminate for exercising rights. Contact us to seek review of a denial or exercise an applicable appeal right.
Applicable state law may also provide rights to opt out of qualifying sales, sharing, targeted advertising, or certain profiling. Where the California Consumer Privacy Act applies, California residents also have rights to know relevant categories, sources, purposes, and recipients of information, and to limit certain uses of sensitive personal information. You may submit applicable requests to support@perqia.com.
Unsubscribe from marketing emails using their link or contact us. Necessary invoice, payment, security, and account messages may continue. Browser settings can restrict cookies, although some features may stop working. Blocking remote email images may limit open tracking. Contact us about session replay choices.
Legacy Do Not Track signals do not by themselves change our data handling. We honor legally recognized opt-out signals, including Global Privacy Control, where required by law.
Children
The Services are not intended for children under 13. If we learn that we have collected personal information through the Services from a child under 13 without legally required parental consent, we will delete it.
Changes and contact
We post updates with a revised effective date and provide additional notice where required. Contact Perqia, Inc. at support@perqia.com or 185 Wythe Ave., F2, Brooklyn, NY 11249.