ZeroSettle Privacy Policy

PLEASE READ THIS PRIVACY POLICY CAREFULLY.

ZeroSettle, Inc. (“ZeroSettle,” “we,” “us,” or “our”) is committed to protecting your privacy. This privacy policy (“Privacy Policy”) explains how we collect, use, disclose, and safeguard personal data (“Personal Data”) when you interact with our websites, platforms, APIs, developer tools, and other online services that link to this policy (collectively, the “Services”).

This Privacy Policy applies to Personal Data that we collect and process in connection with your use of the Services. It does not apply to third-party websites, services, or applications, even if they are accessible through the Services. This Privacy Policy is available at: https://zerosettle.io/legal/privacy

Unless otherwise defined in this Privacy Policy, capitalized terms have the meanings given to them in our Terms of Service (“Terms”). In the event of any inconsistency between this Privacy Policy and the Terms regarding definitions or interpretation, the Terms will control.

For purposes of this Privacy Policy, “Developer” refers to any company or individual that accesses or uses the Services to build or operate applications. “End User” refers to any individual who interacts with a payment flow, UI, or other feature made available by a Developer through their integration of the Services. This Privacy Policy governs ZeroSettle’s own data practices and does not govern Developers’ data practices with respect to their own End Users, for which Developers are solely responsible.

1. What Information We Collect About You

Information You Provide to ZeroSettle

When you interact with us by using the Services or contacting Support, we collect Personal Data that you provide directly. This includes your login credentials, such as your name, email address, password, and single sign-on (SSO) details; business information such as your company name, business type, and website; banking or payment information needed to process transactions and pay fees owed; user preferences and account settings you configure through the Services; and any other information you voluntarily submit, including through support requests or feedback submissions.

Information We Collect When You Use Our Services

In addition to the information you provide directly, we also collect certain data automatically when you interact with the Services. This includes technical, usage, and device-related information that helps us operate, secure, and improve our platform. The types of data we collect in this context include the following:

Log Files

When you use our Services, we may automatically collect information about your computer hardware and software. This information can include your IP address, browser type, domain names, internet service provider (ISP), the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, clickstream data, access times and referring website addresses.

Usage Data

We may collect Usage Data when you interact with the Services. Usage Data includes information such as technical logs, performance metrics, device identifiers, system events, and metadata associated with your interactions, including how often certain features are used, when specific actions are triggered, and what parts of the Services you engage with most. We may use third-party service providers to help collect and analyze Usage Data, but we only share it in a de-identified form that does not reveal Your Content. We use this data to support analytics, improve system performance, troubleshoot issues, and optimize the Services.

Information from Cookies and Similar Technologies

We and our third-party partners may collect Personal Data using cookies, pixel tags, or similar technologies. For more information on our use of cookies and your choices regarding cookies, please see Section 6 (Cookies). We may also collect information through other methods, such as online conferences, events, or contests.

Information Relating to End Users

To the extent that End User Personal Data flows through your integration of the Services in connection with payment processing (for example, transaction records or entitlement data), ZeroSettle may process such data on your behalf solely as necessary to provide the Services. You, as the Developer, are the data controller for your End Users’ Personal Data, and you are solely responsible for ensuring that you have all necessary rights, consents, and legal bases to collect and share such data with ZeroSettle. ZeroSettle’s processing of End User data is limited to what is necessary to operate and secure the Services and to fulfill its obligations to you.

2. How We Use Personal Data

To Provide the Services

We use your account information and Your Content to provide the products and services to you. For example, we use the username and password you choose to provide when signing up for the Services to create your user account. We may also use this information to authenticate you when you use the Services and to provide customer support. We also use payment information to collect fees and to operate payment processing features where ZeroSettle acts as the Merchant of Record.

To Improve and Develop Our Product and Services

We use Usage Data to understand how users interact with the Services and to guide product development. This includes identifying popular features, assessing user behavior trends, and evaluating potential new features or integrations. We may also analyze aggregated data across our user base to understand overall usage patterns. When shared externally, this statistical information does not identify individual users.

To Secure and Protect our Users

We use your information to help prevent security incidents, verify accounts, process product sign-ups, and detect misuse of the Services. Log files may also be used to generate general usage statistics, improve navigation, and support compliance with analytics, export control, and regulatory requirements. We collect and log IP addresses to monitor access patterns, investigate security events, and troubleshoot issues. Where appropriate, we may link this automatically collected data to other personal information you provide.

To Communicate with Our Users

We use your account information to communicate with you, which could include providing you with updates and other information relating to our services and products, providing information that you request, and responding to comments, questions, and requests. You may opt out of receiving promotional emails or text messages from ZeroSettle by following the unsubscribe instructions included in those emails or text messages. If you opt out, we may still send you transactional or relationship messages, such as emails about your account or updates to our products and services. You can opt out of promotional messages at any time by following the unsubscribe instructions provided or by contacting ZeroSettle support at support@zerosettle.io. Transactional messages may still be sent to ensure proper service delivery.

To Comply with Legal Obligations

We may use your information as necessary to comply with applicable laws, respond to lawful requests from government authorities, enforce our Terms, and protect the rights, property, or safety of ZeroSettle, our users, or the public.

3. How We Share Personal Data

Service Providers

We may share Personal Data with our third-party service providers to support our Services. For example, we may use service providers for data hosting, analytics, customer support, payment processing, and application development. We may need to share your information with service providers to provide services to you. Examples may include analyzing data or performing statistical analysis on your use of the Services, supplementing the information you provide us in order to provide you with better service, developing and improving the product and services, and providing customer service or support. These service providers are prohibited from using your Personal Data except for these purposes, and they are required to maintain the confidentiality of your information.

Compelled Disclosure

We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process.

4. How We Transfer Personal Data Internationally

Scope of International Transfers

When we share Personal Data of individuals in the EEA, Switzerland, the UK, or other countries with third parties, we use a variety of legal mechanisms to safeguard the transfer including the European Commission-approved Data Privacy Framework Standard Contractual Clauses. Please contact us if you need more information about which legal mechanisms we rely on to transfer personal data internationally.

5. How We Store and Secure Personal Data

Data Storage and Security

We use a variety of security technologies and procedures to help protect your Personal Data from unauthorized access, use or disclosure. We secure the Personal Data you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All Personal Data is protected using appropriate physical, technical and organizational measures. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at support@zerosettle.io.

Retention of Personal Data

We retain Personal Data that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements).

6. Cookies

Cookies

Technologies such as cookies may be used by ZeroSettle and our analytics or service providers (as applicable). Cookies are used to remember you and to collect information about how you interact with the Services. If you have an account with the Services, we may link this usage data with other information. You may have the option to either accept or refuse these cookies. If you choose to refuse, you may not be able to use some portions of the Services.

What Are Cookies?

Cookies are small text files sent to your browser when you visit a website. They allow the site to recognize your device and remember your preferences on future visits. Cookies may store settings or other data to support functionality and improve your experience. Cookies set by us are called first-party cookies, while cookies set by other parties, such as analytics or content providers, are called third-party cookies. These may track activity across multiple websites. We may also use third-party analytics tools to understand how users interact with the Services, identify bugs or crashes, and improve performance. These tools collect anonymized data such as usage patterns, device status, and error logs, and are not used to personally identify users.

Why Do We Use Cookies?

We use first party and third party cookies for several reasons. Some cookies are required for technical reasons in order for our website to operate, and we refer to these as “essential” or “strictly necessary” cookies. Other cookies also enable us to track and target the interests of our users to enhance the experience on our Services. This data is used to analyze trends, administer the website, monitor how visitors navigate around the website, and to gather demographic information about our user base as a whole.

What Types of Cookies Do We Use and How Do We Use Them?

We use several types of cookies to support and improve our website. Essential cookies are required to deliver the services available through the site. Performance and functionality cookies enhance the user experience but are not strictly necessary for the website to function. We also use analytics and customization cookies, which help us understand how users interact with the site and allow us to tailor content based on those interactions. These cookies may operate in aggregate form or be used to personalize your experience.

How Can I Control Cookies?

You have the right to choose whether to accept or reject cookies. You can manage your cookie preferences through browser settings or by using opt-out links provided by advertising networks. Most browsers allow you to block or delete cookies, although doing so may limit access to certain features on our website. For browser-specific guidance, consult your browser’s help menu. You can also opt out of targeted advertising by visiting aboutads.info/choices, optout.aboutads.info, or, if located in the European Union, youronlinechoices.eu. Please note that opting out of targeted ads does not stop all advertising — it only affects personalized ads.

7. Your Privacy Rights and Choices

Access, Correction or Deletion

You can request access, correction, updates or deletion of your Personal Data.

Objection

You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data.

Withdraw Consent

If we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.

Complaint

You have the right to complain to a data protection authority about our collection and use of your Personal Data. To exercise any of these rights, please submit a request using any communication method provided through the Services or contact us at support@zerosettle.io. If no method is available, you may choose not to use the Services until a contact mechanism is published.

Please note that to protect Personal Data, we may verify your identity by a method appropriate to the type of request you are making. Depending on where you reside, you may be entitled to empower an “authorized agent” to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws.

We will respond to your request to change, correct, or delete your data within a reasonable timeframe and notify you of the action we have taken. In some instances, your rights may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights.

EEA or UK Rights

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), you may have additional rights under applicable data protection laws, including the right to access, correct, delete, or restrict the use of your Personal Data, as well as the right to object to certain processing activities and to data portability.

If you reside in the European Economic Area or the United Kingdom and have questions about your data rights or our processing activities, you may also contact us at support@zerosettle.io.

8. California Privacy Rights

CCPA Applicability

As ZeroSettle does not currently meet the thresholds established by the California Consumer Privacy Act (the “CCPA”), the CCPA does not apply to your use of the Services. In the event that ZeroSettle does meet the thresholds established by the CCPA in the future, this section will be updated accordingly.

9. Other Important Privacy Information

We Never Sell Personal Data

We will never sell your Personal Data to any third party.

Information About Children

The Services are not intended for or targeted at children under 18, and we do not knowingly or intentionally collect Personal Data about children under 18. If you believe that we have collected Personal Data about a child under 18, please contact us at support@zerosettle.io so that we may delete the information.