Privacy Policy

• Merchants, the store owners who use Payd. Payd is responsible for your account information.
• Buyers, the people who check out on a store's Payd checkout. The store runs the sale; Payd handles buyer details on the store's behalf, only to run the checkout and create the order. Whop handles the payment under its own privacy policy. If you bought from a store, contact that store first: it decides how your order details are used.

From merchants

• Account: your name, email address and password (stored only as a one-way hash), how you joined (invite link or code), and your email settings.
• Store connections: your Shopify store address and details, your Shopify app's Client ID, secret and access tokens, your Whop API key and webhook secret, and a Meta Conversions API token if you add one. Keys, secrets and tokens are stored encrypted.
• Store settings: store name, logo, checkout look, tax choice, tracking pixel IDs and checkout domain.
• Activity: setup steps, orders and errors for each store, and a record of the emails Payd sent you (the kind and whether it was delivered, not the links in it).

From buyers, for the store

• Checkout details: email, phone number if given, shipping and billing address, the cart (products, prices, shipping choice, discount code), order note, marketing choice, browser type and the page they came from.
• Payment: card details go into Whop's payment form, not Payd's. Payd stores Whop's payment ID and status, the amounts, refunds and tracking numbers.

Automatically

• Cookies: a login cookie for the dashboard, an invite cookie if you opened an invite link (30 days), and a cookie that remembers whether you hid the setup explainer. Payd sets no advertising cookies. The checkout keeps a few details in the buyer's browser storage, for example so a purchase is reported only once.
• Server logs: IP address, browser, pages requested and errors, used for security and fixing problems.

• To run the checkout: show the cart with the store's Shopify prices, shipping and discounts, take payment through Whop, create the order in Shopify, send tracking to Whop and make the refunds the store asks for.
• To run your account: sign-in, and emails about your account and your stores (such as confirmations, password resets and alerts, which you can turn off in Account).
• To keep Payd secure, prevent abuse and fix problems.
• To send purchase events to Meta and TikTok, only when a store adds its own pixel IDs. With Meta's Conversions API, the buyer's email and phone are hashed before they're sent. Test orders never send events.

Payd doesn't sell personal information, doesn't use buyers' details for its own marketing, and doesn't show ads.

• Shopify: the store's own Shopify store receives each order and the buyer details on it.
• Whop: payments, refunds, test holds and tracking, as the merchant of record.
• Meta and TikTok: purchase and checkout events, only for stores that add their pixel IDs. Their pixels load on that store's checkout and follow their own policies.
• Services that run Payd: hosting (Fly.io, in the United States), email delivery (Resend) and address suggestions at checkout (Google Places receives the address text a buyer types, when the feature is on). They may only use the data to provide their service to Payd.
• When the law requires it, or to protect the rights and safety of buyers, merchants or Payd.
• If Payd is sold or merged, the information moves with it and this policy keeps applying.

• Account information: while your account is open.
• Store data, checkout details, orders and activity: while the store exists in Payd. Deleting a store in its Settings deletes its connections, keys, checkouts, orders and activity from Payd. Orders already written to Shopify stay in your Shopify store, and payments stay in Whop.
• Deleting your account in Account deletes it right away, with its stores, orders, invite links and the record of emails sent, except what the law requires us to keep. Copies in backups are deleted as the backups expire.
• Server logs: for a limited time, then deleted.

Payd encrypts store keys, secrets and tokens at rest (AES-256-GCM), stores passwords only as hashes, and uses HTTPS everywhere. No system is perfectly secure; if you find a problem, please tell us.

• Merchants can see and change most of their information in the dashboard, delete a store in its Settings or the whole account in Account, and ask us for a copy of their information.
• Buyers: contact the store you bought from. If it can't help, contact us and we'll work with the store.
• Depending on where you live (for example the EU, the UK or California), you may have the right to access, correct, delete or move your information, or to object to how it's used. We'll answer such requests within the time the law sets.

Payd accounts are for businesses run by adults (18 or older). Payd doesn't knowingly collect information about children for itself.

We may update this policy. The date at the top shows the latest version, and we'll tell merchants about significant changes by email or in the dashboard before they apply.

Reach us through the Help center, and say which account or store it's about.

The Terms of Service cover the rest of how Payd works.