Privacy

The full notice is being drafted with counsel. What follows is an accurate description of what this software actually does with your data today — it is not a substitute for the notice, and where the two eventually differ, the notice governs.

What is held, and where

• Your session is in a cookie your browser cannot read from JavaScript. No credential is stored in this browser, so a script that reaches this page has nothing to take.
• Verification documents go to the partner performing the check and to nobody else. They are not used for anything else.
• Identity numbers are never stored in your browser. A part-finished verification keeps what you typed on this device — except the identity numbers and your account number, which are deliberately dropped and have to be retyped.
• Payment records are permanent. They are the evidence a bank may later ask you for, and deleting them would remove your ability to answer.

What is not done

• No third-party analytics or advertising tags run on any page of this application.
• No payment data is sold, shared for marketing, or used to train anything.
• The payment page sets no cookie and holds no session. A payer who opens it is not tracked by it.