Privacy policy

For account holders and website visitors, we act as a controller of personal data. For data about a merchant's customers processed through checkout, invoices and subscriptions, we generally act as a processor or service provider on behalf of the merchant.

Payment providers process payment data under their own privacy policies and act as independent controllers for that data.

• Account data: name, email, password hash, MFA settings, role and team membership.
• Business data: business profile information you provide for provider onboarding.
• Transaction data: payment amounts, statuses, customer names and emails, and limited card details reported by the provider (such as brand and last four digits). We do not receive or store full card numbers or security codes.
• Technical data: IP address, user agent, request identifiers, security and audit logs.
• Communications: messages you send us, for example through our contact form.

• To provide, secure and improve the Services.
• To prepare and route onboarding information to the payment provider you choose.
• To prevent fraud and abuse, enforce our policies and comply with legal obligations.
• To communicate with you about your account, billing and service changes.

We share data with payment providers you connect, with service providers who help us operate the Services (such as hosting and email delivery) under contractual safeguards, and where required by law. On our public website we use Google Analytics to measure visits (see our Cookie Policy); it is not used in the dashboard or on checkout pages. We do not sell personal data.

[List of subprocessors to be published.]

We use measures including MFA, role-based access control, encryption of stored secrets, hashed API keys, audit logging and tenant isolation. See our security page. No system is completely secure.

We retain personal data for as long as needed to provide the Services and to meet legal, accounting and dispute-resolution obligations. [Specific retention periods to be confirmed.]

Depending on where you live, you may have rights to access, correct, delete or port your personal data, or to object to or restrict certain processing. Contact legal@allidian.com. If you are a customer of a merchant using Allidian, please contact that merchant first.

We are based in the United States. Where data is transferred internationally, we use appropriate safeguards as required by applicable law. [Transfer mechanisms to be confirmed.]

See our Cookie Policy.

We will post updates here and change the version above. Contact: legal@allidian.com · Meridian Digital Enterprises LLC, [Registered address to be provided].