Privacy Policy

1. Introduction

Day One Payment (“Day One Payment,” “Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your information.

This Privacy Policy explains how we collect, use, store, disclose, and safeguard information when you:

• Visit Day One Payment websites
• Use Day One Payment-hosted agent websites
• Create accounts
• Access CRM systems or dashboards
• Submit merchant applications or forms
• Use our software, automation tools, AI features, or services
• Interact with our support teams, onboarding systems, or communications

By accessing or using our services, you agree to the practices described in this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies to:

• Day One Payment websites and hosted domains
• Day One Payment-hosted agent websites
• CRM systems
• Merchant application systems
• Landing pages
• Hosted domains
• Automation systems
• AI-assisted tools
• Communication systems
• Related software and services operated by Day One Payment

Independent agents using Day One Payment-hosted websites operate within Day One Payment infrastructure.

Information submitted through Day One Payment-hosted websites may be accessible to:

• The assigned account owner
• Authorized users or sub-users
• Day One Payment administrators
• Support personnel
• Compliance or operational teams where necessary

for operational, compliance, fraud prevention, security, support, and platform administration purposes.

3. Information We Collect

A. Information You Provide Directly

We may collect information you provide when you:

• Create accounts
• Subscribe to services
• Submit merchant applications
• Fill out forms
• Upload documents
• Customize websites
• Use CRM systems
• Contact support
• Communicate through the Platform

B. Information Collected Automatically

When you use our websites or platforms, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Session identifiers
• Login activity
• CRM activity
• Website interactions
• Usage metrics
• Referral URLs
• Pages visited
• Time and date of access
• Clickstream data
• Performance diagnostics
• Security monitoring data

We may also collect limited device and browser information to: maintain security, prevent fraud, detect abuse, improve platform stability, and support account authentication.

C. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain login sessions
• Authenticate users
• Remember preferences
• Analyze traffic and usage
• Improve platform functionality
• Support security monitoring
• Detect fraud or abuse
• Enhance user experience

Third-party analytics or infrastructure providers may also use cookies or related technologies. Users may control cookie settings through browser preferences, though disabling cookies may impact platform functionality.

4. How We Use Information

We use collected information for:

• Service Delivery: Operating websites and hosted services, managing CRM systems, processing merchant applications, providing subscriptions and software access, managing domains and DNS services, delivering automation features, supporting user accounts.
• Operations & Support: Providing technical support, sending notifications and updates, managing billing and subscriptions, responding to inquiries, troubleshooting issues.
• Security, Risk & Compliance: Fraud prevention, identity verification, security monitoring, abuse detection, regulatory compliance, enforcement of agreements, protection of platform integrity.
• Platform Improvement: Analyzing usage trends, developing new features, improving user experience, testing platform functionality, monitoring performance and reliability.
• AI & Automation Features: Day One Payment may use submitted information to operate AI-assisted tools, generate suggested content, support automation systems, and improve workflows and functionality. AI-generated outputs may contain inaccuracies, require human review, and should not be relied upon without verification. Users remain solely responsible for reviewing and approving all AI-assisted outputs and communications.
• Marketing & Communications: We may use information to send updates, deliver service announcements, provide onboarding communications, send educational or promotional content, and inform users of new services or features. Users may opt out of certain marketing communications where applicable.
• Aggregated & Anonymous Data: We may use aggregated, anonymized, or de-identified information for analytics, research, platform improvements, operational insights, and service optimization. Such information does not identify individual users.

5. How We Share Information

We do not sell personal information.

We may share information with:

• Service Providers: Hosting providers, cloud infrastructure providers, CRM providers, email and SMS providers, analytics providers, domain registrars, AI service providers, technical support vendors, security and compliance providers.
• Financial & Processing Partners: Where applicable: acquiring banks, payment processors, underwriting partners, risk management providers, compliance providers, card network-related service providers.
• Internal Access & Authorized Users: Information submitted through Day One Payment-hosted systems may be accessible to account owners, authorized sub-users, administrators, support personnel, and compliance teams where reasonably necessary for operational purposes.
• Professional Advisors: Attorneys, accountants, auditors, insurance providers, compliance consultants where reasonably necessary for business, operational, legal, or compliance purposes.
• Legal & Security Requirements: When required by law, to comply with legal obligations, to investigate fraud or abuse, to enforce agreements, or to protect rights, safety, or security.
• Business Transfers: Information may be transferred in connection with mergers, acquisitions, financing transactions, asset sales, or corporate reorganizations.

6. SMS & Mobile Information

Mobile numbers and SMS opt-in information:

• Are used only for permitted communications
• Are not sold to third parties
• Are protected under this Privacy Policy

Standard message and data rates may apply. Users may opt out of SMS communications where applicable.

7. Data Retention

We retain information as long as reasonably necessary to provide services, maintain platform operations, comply with legal obligations, resolve disputes, enforce agreements, maintain business and operational records, and prevent fraud and abuse.

Retention periods may vary depending on: regulatory requirements, account activity, security concerns, operational needs, and legal obligations. Day One Payment reserves the right to retain logs, backups, archived records, and operational data where reasonably necessary.

8. Data Security

We implement administrative, technical, and physical safeguards designed to help protect information against unauthorized access, misuse, alteration, or disclosure. However, no system or method of transmission can guarantee absolute security.

Users are responsible for: maintaining password confidentiality, securing account credentials, restricting unauthorized access to their accounts, and maintaining appropriate security practices.

9. User Rights & Choices

Depending on applicable law and location, users may have rights to access information, correct inaccurate information, request deletion, restrict certain processing, and opt out of marketing communications.

Certain information may be retained for: compliance purposes, security purposes, fraud prevention, operational recordkeeping, and legal obligations. Requests may be submitted using the contact information below.

10. California Privacy Rights (CCPA/CPRA)

California residents may have rights to: know what personal information is collected, request access to collected information, request deletion of personal information, correct inaccurate information, limit certain data sharing practices, and request disclosure regarding categories of data collected or shared.

Day One Payment does not sell personal information.

Consumers may submit verifiable consumer requests using the contact information below. Only the consumer or an authorized representative may submit requests regarding personal information. Requests must provide sufficient information to verify identity and describe the request with reasonable detail. Certain requests may be denied where legally permitted.

11. Categories of Personal Information Collected (CCPA Disclosure)

“Shared” may include disclosures to: service providers, infrastructure providers, CRM systems, analytics providers, payment and compliance partners, and authorized account users. Day One Payment does not sell personal information.

12. Third-Party Services & Links

Day One Payment websites and systems may integrate with or link to third-party services including payment processors, domain registrars, hosting providers, analytics platforms, CRM integrations, AI providers, and external websites and applications. Day One Payment is not responsible for the privacy practices or policies of third-party services. Users should review third-party privacy policies separately.

13. Children’s Privacy

Our services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children.

14. International Users

If accessing our services from outside the United States, your information may be transferred to and processed in jurisdictions with different data protection laws. By using the services, you consent to such transfers where permitted by law.

15. Policy Updates

We may update this Privacy Policy periodically. Updated versions will be posted with a revised “Last Updated” date. Continued use of the Platform after updates constitutes acceptance of the revised Privacy Policy.