Privacy Policy

PAY2PAY is currently in pre-launch testing. The product collects account information (email, date of birth), agreement and payment records you or a counterparty create, and — for identity/business verification — information submitted through our financial and identity-verification providers. None of this information is sold, and it is not shared with third parties for marketing. A technical overview of what is collected and how it is minimized is maintained in this project's internal documentation (docs/DATA_MODEL.md), pending a complete, counsel-reviewed privacy policy.

A complete privacy policy — covering data retention, your rights, and how information is handled — will be published, after legal review, before any public or production launch.

Business accounts and verification data

A Business organization account additionally involves: business identity information (legal name, formation details, address) submitted for business verification; an authorized representative's contact information; Tax ID/EIN information submitted for verification purposes — PAY2PAY's own systems never store the full Tax ID/EIN, only its last 4 digits for reference, with the full value transmitted only to our verification provider; subscription billing information, including payment-method metadata (such as a card's last 4 digits) stored by PAY2PAY, while full payment credentials are held only by our payment/billing provider, never by PAY2PAY directly; and an audit record of organization administrative actions (such as role or team-membership changes), retained for the organization's own security and compliance visibility.