Privacy Policy

Last updated: July 18, 2026

This policy explains how Valetfy handles information when operators use our QR payment software and customers open QR payment links, product orders, receipts, and customer-chosen tips. We do not sell personal information.

Information we collect

  • Operator account and business information, including phone number, email where provided, account identifiers, profile details, and sign-in or verification records.
  • Connected-payment information, including Stripe account identifiers, onboarding or capability status, payment and payout references, amounts, fees, refunds, and reconciliation status.
  • Terminal and transaction information, including exact charges, product listings and product orders, customer-chosen tips, timestamps, status, notes, and receipt tokens.
  • Customer information voluntarily supplied during checkout or support, such as contact details, order details, or notes.
  • Device, browser, network, security, diagnostic, and usage information used to operate, protect, and improve the Service.
  • Message-delivery records for transactional SMS or email, such as queued, sent, delivered, failed, and opt-out status.

How we use information

  • Authenticate accounts and maintain operator access.
  • Create and operate QR payment links, exact charges, product checkouts, product orders, customer-chosen tips, receipts, refunds, and payout activity.
  • Process and reconcile payments through Stripe without storing full card numbers.
  • Send requested or transactional notices about sign-in, recovery, setup, payments, receipts, and Service activity.
  • Prevent fraud and abuse, diagnose errors, support users, measure feature use, and improve reliability and performance.
  • Comply with legal, tax, accounting, security, and payment-network obligations.

Payments

  • Stripe processes card and wallet details. Valetfy does not store full card numbers or card security codes.
  • We may store Stripe identifiers, connected-account status, payment status, amounts, fees, refunds, disputes, and receipt information needed to operate and reconcile the Service.
  • Stripe handles information under its own privacy policy and payment agreements.

Analytics, diagnostics, and session replay

  • Where enabled, we use analytics and diagnostics to understand page views, feature events, browser or device context, performance, and application errors.
  • Where enabled, masked session replay may help us reproduce interface problems. Form inputs are configured to be masked, sensitive text can be explicitly masked, and Stripe card fields remain inside Stripe-controlled frames.
  • We use account identifiers rather than phone numbers to identify signed-in users in analytics.

SMS and email

  • We may send transactional messages for authentication, recovery, setup, payment activity, receipts, or other actions you request.
  • Message frequency varies. Carrier or provider delivery may be delayed or fail.
  • Reply STOP to opt out of supported SMS programs, START to resubscribe, or HELP for help.
  • We retain delivery and opt-out status when needed for compliance, auditing, and troubleshooting.

How we share information

  • With service providers that help run payments, hosting, databases, authentication, messaging, email, analytics, media, security, and error monitoring.
  • With an operator when a customer completes or asks about a transaction with that operator.
  • When required by law, legal process, payment-network rules, or to protect users, the public, Valetfy, or the integrity of the Service.
  • As part of a financing, acquisition, reorganization, or sale, subject to appropriate safeguards.
  • We do not sell personal information.

Retention

  • We keep account, transaction, payment, refund, receipt, message, and support records as needed for operations, accounting, security, disputes, and legal obligations.
  • Retention varies by record type and may be extended when required for fraud prevention, legal claims, or payment reconciliation.
  • When information is no longer needed, we may delete or de-identify it, subject to backups and legal requirements.

Security

  • We use access controls, encryption in transit, provider security features, monitoring, and audit records appropriate to the Service.
  • No online service is perfectly secure. Protect your phone, account, QR codes, and private payment or receipt links, and contact us if you suspect misuse.

Your choices

  • You can update information available in your account and choose whether to use optional messaging or analytics controls made available to you.
  • You may request access, correction, or deletion where applicable, subject to identity verification and records we must retain.
  • You may opt out of supported SMS messages with STOP and can control cookies through browser settings, although some Service functions require local storage or cookies.

Children

  • Valetfy is a business payment service and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

  • We may update this policy as the Service changes. We will revise the date above when we do.

Contact

Questions or privacy requests? Contact us at bear@valetfy.com.