Privacy Policy

This Privacy Policy explains how HashX LLC, HashX, we, us, or our collects, uses, shares, and protects personal data when people use our websites, commerce software, website-building tools, checkout, payment tools, APIs, and related services.

1. Scope

This policy applies to merchants that use HashX to build websites, operate commerce workflows, or accept payments; customers who pay through HashX-powered checkout experiences; website visitors; business contacts; and other people who interact with us.

When we say merchant in this policy, we also mean the merchant's owners, officers, employees, contractors, authorized users, and representatives where the context requires.

Merchants may have their own privacy policies. If you buy from a merchant, that merchant is also responsible for how it collects and uses your data, including product, order, fulfillment, refund, and customer support data.

2. Data We Collect

Account and business data: name, email, phone number, business name, address, website, role, login details, tax information, business registration information, beneficial owner information, and authorized representative information.

Identity and compliance data: government identification, date of birth, ownership records, sanctions or watchlist screening results, risk review information, and documents needed to verify a merchant or transaction.

Payment and transaction data: order amount, currency, payment method type, limited card or bank details, billing and shipping details, customer contact information, merchant information, authorization status, risk signals, refund, dispute, payout, and settlement records.

Commerce and website data: website content, storefront settings, product or service details, order information, domain and integration settings, checkout configuration, uploaded files, and other information merchants provide through our software.

Usage and device data: IP address, device identifiers, browser type, pages visited, referring pages, timestamps, cookie identifiers, and activity in our websites, dashboards, checkout, APIs, and support tools.

Communications data: messages, support requests, call or meeting details, survey responses, and feedback that you send to us.

3. How We Use Data

We use personal data to provide and operate HashX, build and host merchant websites or commerce experiences, process card and bank payments, settle payouts, charge fees, create receipts, provide support, and communicate about accounts, transactions, disputes, and service updates.

We also use personal data to onboard, underwrite, monitor, and support merchants; verify identity and eligibility; prevent fraud; manage risk; comply with sanctions, anti-money laundering, tax, accounting, payment network, bank, and legal requirements; and enforce our Terms of Service.

We may use aggregated or de-identified data to improve services, analyze performance, develop features, and understand website, commerce, payment, and platform reliability.

4. Legal Bases

Where a legal basis is required, we process personal data to perform a contract, comply with legal obligations, pursue legitimate interests such as security, fraud prevention, service improvement, and business operations, or with consent where required.

5. How We Share Data

We share personal data with payment processors, acquiring banks, card networks, bank payment networks, fraud prevention providers, identity verification providers, compliance vendors, cloud hosting providers, software and integration providers, analytics providers, communications providers, professional advisers, and other service providers that help us operate HashX.

We share transaction and commerce data with the merchant, customer, payment partners, payment method providers, and service providers involved in a transaction or commerce workflow as needed to authorize payment, complete purchases, provide receipts, settle payouts, fulfill orders, process refunds, handle disputes, operate websites, and provide customer support.

We may share data with regulators, courts, law enforcement, payment networks, financial institutions, tax authorities, or other third parties when required by law, to protect rights and safety, to prevent fraud or abuse, or to enforce our agreements.

We may share data as part of a financing, merger, acquisition, reorganization, sale of assets, or similar corporate transaction. We do not sell personal data or share it for cross-context behavioral advertising.

6. International Data Transfers

HashX supports merchants and customers in different countries. Personal data may be processed in the United States and other countries where HashX, our affiliates, or our service providers operate. Where required, we use appropriate safeguards for international transfers.

7. Data Retention

We keep personal data for as long as needed to provide services, operate websites and commerce tools, complete transactions, maintain records, resolve disputes, prevent fraud, comply with tax, accounting, sanctions, anti-money laundering, payment network, bank, and legal obligations, and enforce agreements.

We may be unable to delete some payment, identity, tax, dispute, or compliance records immediately because financial services laws and payment rules often require retention.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data. These safeguards include access controls, encryption where appropriate, monitoring, and service provider review.

No system is perfectly secure. Users are responsible for protecting account credentials, limiting access to their accounts, and notifying us promptly about suspected unauthorized access.

9. Cookies

We use cookies and similar technologies to operate our websites, merchant websites, dashboards, and checkout, remember preferences, secure accounts, measure performance, understand usage, and improve our services. You can control cookies through browser settings, but some features may not work without them.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data. You may also have the right to withdraw consent or appeal a decision where applicable.

We will not discriminate against you for exercising privacy rights. Some requests may be limited by legal, payment, fraud prevention, security, or recordkeeping obligations.

To make a privacy request, contact support@hashx.com. We may need to verify your identity before responding.

If we process your data on behalf of a merchant, we may direct your request to that merchant or help route the request when we can identify the merchant.

11. Merchant Obligations

Merchants that send personal data to HashX or collect personal data through HashX-powered websites, checkout, forms, integrations, or other tools must have the rights, notices, consents, and lawful bases needed to do so. Merchants must use customer data received through HashX only for legitimate transaction, fulfillment, support, compliance, and legal purposes.

12. Children

HashX is not directed to children under the age required by applicable law, and we do not knowingly collect personal data from children for our services.

13. Changes

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by posting the updated policy, sending an email, or using another reasonable method.

14. Contact

Questions, complaints, or privacy requests may be sent to support@hashx.com.