EPEnterprise Pay Gateway

Legal

Privacy policy

Enterprise Pay Gateway collects your account details, business profile, products and the payment records Stripe reports back to us. We never receive card numbers, identity documents or bank credentials — those go straight to Stripe. We use a Google tag to measure advertising, and we do not sell personal data.

Last updated 10 September 2026

What we collect

  • Account data: your name, email address and password hash.
  • Business data: business name, description, website, industry, support email and storefront slug.
  • Product and transaction data: the products you create, and payment records returned to us by Stripe such as amount, currency, status and identifiers.
  • Enquiry data: anything you send us through the contact form.
  • Technical data: standard server logs and error reports used to keep the service working.

What we do not collect

  • We never receive or store full card numbers, CVCs, or the identity documents and bank credentials you submit during verification. Those go directly to Stripe through its hosted flows.

Why we process it

  • To provide the service you signed up for, including creating checkout sessions and calculating platform fees.
  • To bill you for your subscription and platform fees.
  • To provide support and respond to enquiries.
  • To keep the service secure and to meet legal and accounting obligations.

Who we share it with

  • Stripe, for payment processing, verification and payouts.
  • Google, for advertising measurement: when you arrive from one of our ads, a Google tag reports visits and sign-ups (page and conversion events, not payment data) so we can measure our advertising. See how Google uses this data at https://business.safety.google/privacy/. Where consent law applies (for example the EEA, UK and Switzerland), this measurement is off unless you allow it.
  • Our hosting and database infrastructure provider, which stores data encrypted at rest.
  • Authorities, where we are legally required to.
  • We do not sell personal data.

How long we keep it

  • Account and business records are kept while your account is active and for a period afterwards to meet accounting and tax obligations. Transaction records are kept for the period required by law in the relevant jurisdiction. Contact enquiries are kept for up to two years.

Your rights

  • Depending on where you live you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Contact us and we will respond within the period required by applicable law.

Cookies

  • We use the cookies and local storage needed to keep you signed in and to keep the service secure. We also load a Google advertising measurement tag that may set cookies to measure visits and sign-ups from our ads; it is disabled in regions that require consent unless you allow it. We do not use cross-site tracking for third-party advertising.

This policy is a working draft for a pre-launch product. The data controller's registered name, address and data protection contact will be published before launch. Contact us with any privacy question in the meantime.