Privacy Policy

Last Updated: April 1, 2026

This Privacy Policy (“Policy”) explains how TransactBridge and its affiliated entities (collectively, “TransactBridge,” “we,” “us” or “our”) collect, use, disclose, process, and safeguard Personal Data when you interact with our websites, services, products, or otherwise engage with us in business or consumer relationships.

This Policy applies to all individuals who interact with our business as customers, merchants, visitors, users of our products and services, partners, suppliers, job applicants, or otherwise (“you”). Your relationship with us determines which parts of this Policy apply to you.

Please read this Policy carefully. We may update it from time to time. We encourage you to review this page regularly for changes.

A. Our Corporate Structure

TransactBridge operates through affiliated entities in multiple jurisdictions, including but not limited to:

• TransactBridge Inc. (United States)
• TransactBridge Solution Private Limited (India)

The specific entity acting as Data Controller (or equivalent under applicable law) depends on:

• The entity identified in your merchant agreement
• The entity identified at checkout
• The entity onboarding you

B. Role in Processing

Depending on context, TransactBridge may act as:

• Data Controller (e.g., when acting as Merchant of Record or conducting AML checks)
• Independent Controller (for regulatory compliance purposes)
• Processor (when processing limited data on behalf of merchants)

When acting as Merchant of Record, TransactBridge independently determines the purposes of processing for payment processing, tax compliance, fraud detection, and regulatory obligations.

A. How We Collect Personal Data

B. Personal Data We Process

TransactBridge collects Personal Data that is necessary to provide its Merchant-of-Record, payment processing, compliance, fraud prevention, tax calculation, and related services. The categories of Personal Data we collect depend on the nature of your interaction with us.

1. Personal Data Collected from Customers (End Users)

When you purchase goods or services through a TransactBridge-powered checkout, we may collect:

A. Identity Information

• Full legal name
• Date of birth (where required for compliance)
• Government-issued identification (where required by law)

B. Contact Information

• Email address
• Telephone number
• Billing address
• Shipping address

C. Payment & Financial Information

• Payment method type (e.g., card, bank transfer, wallet)
• Card network and limited payment metadata
• Transaction amount
• Currency
• Authorization codes
• Refund history
• Chargeback status

Full payment card numbers are processed via PCI-DSS compliant payment providers. TransactBridge does not store full card numbers unless strictly required and compliant with applicable standards.

D. Transaction & Order Information

• Products or services purchased
• Order ID and timestamps
• Merchant details
• Pricing and applied taxes
• Discount or promotional usage

E. Fraud & Risk Signals

• IP address
• Device fingerprint
• Browser and operating system
• Geolocation derived from IP
• Transaction behavior patterns
• Velocity and anomaly indicators

These data points are used to detect fraud and reduce financial crime risk.

2. Personal Data Collected from Merchants (KYB & Underwriting)

When onboarding or servicing merchants, we collect:

A. Business Identification Information

• Legal entity name
• Trade name
• Company registration number
• Business address
• Tax identification numbers

B. Beneficial Ownership & Control Information

• Names of directors and officers
• Names of beneficial owners
• Ownership percentages
• Government-issued identification of controlling individuals
• Proof of address documentation

C. Financial Information

• Business bank account details
• Settlement account information
• Historical processing volumes
• Chargeback ratios
• Financial statements (where required)

D. Compliance & Risk Information

• Industry classification
• Product descriptions
• Website and marketing materials
• Sanctions screening results
• AML risk ratings
• Underwriting assessments

This information is collected to satisfy regulatory requirements and manage financial risk exposure.

3. Personal Data Collected Automatically

When you visit our website or access dashboards, we may automatically collect:

• IP address
• Device identifiers
• Browser type and version
• Operating system
• Session logs
• Clickstream data
• Referring URLs
• Cookies and similar tracking technologies

This data supports system functionality, analytics, security monitoring, and fraud detection.

4. Communications Data

When you contact us, we may collect:

• Email correspondence
• Support tickets
• Live chat transcripts
• Call recordings (where legally permitted)
• Feedback submissions

5. Compliance & Regulatory Data

In connection with our legal obligations as a cross-border payments facilitator, we may process:

• Sanctions screening results
• Watchlist matches
• Regulatory inquiry records
• Suspicious activity monitoring indicators
• Government reporting documentation

6. Sensitive Personal Data

In limited circumstances, we may collect sensitive Personal Data where required by law or compliance obligations, including:

• Government identification numbers
• Biometric verification data (if identity verification requires it)
• Data required for enhanced due diligence

Such data is processed only where:

• Required by law
• Necessary for AML/KYC compliance

7. Data We Do Not Intentionally Collect

We do not intentionally collect:

• Personal data from individuals under 18 years of age
• Unnecessary special category data unrelated to compliance obligations
• Full payment card numbers outside secure, compliant environments

C. How We Use Personal Data

TransactBridge processes Personal Data only where necessary to operate its Merchant-of-Record, payment processing, compliance, fraud prevention, and related services. The purposes for which we process Personal Data depend on the nature of your interaction with us (Customer, Merchant, or Website Visitor).

1. To Provide and Operate Our Services

We use Personal Data to:

• Process customer payments
• Act as Merchant of Record for billing and tax purposes
• Facilitate order confirmation and delivery coordination
• Manage refunds and reversals
• Settle merchant payouts
• Provide merchant dashboards and reporting tools
• Respond to customer and merchant support requests

2. To Conduct Identity Verification (KYC / KYB)

As a cross-border payments facilitator, we are required to verify the identity of merchants and, in certain circumstances, customers.

We use Personal Data to:

• Verify merchant business registration
• Identify beneficial owners and controlling persons
• Confirm identity documentation
• Validate tax registrations
• Assess merchant onboarding eligibility

3. Anti-Money Laundering (AML) & Sanctions Compliance

We process Personal Data to comply with global AML, Counter-Terrorist Financing (CTF), and sanctions laws.

This includes:

• Screening individuals and entities against sanctions lists
• Monitoring transactions for suspicious activity
• Conducting enhanced due diligence
• Reporting suspicious activity to regulators
• Maintaining legally required compliance records

4. Fraud Detection & Risk Management

We use Personal Data to protect customers, merchants, financial institutions, and our platform from fraud and abuse.

This includes:

• Transaction risk scoring
• Device fingerprinting
• Behavioral analytics
• Monitoring chargeback ratios
• Identifying anomalous transaction patterns
• Preventing account takeover attempts

Automated systems may be used to evaluate transaction risk and merchant risk profiles.

5. Chargeback & Dispute Management

We process Personal Data to:

• Investigate disputes
• Respond to chargebacks
• Provide evidence to acquiring banks and card networks
• Monitor dispute ratios
• Enforce merchant reserve policies

6. Tax Compliance & Reporting

Where acting as Merchant of Record, we use Personal Data to:

• Calculate indirect taxes (e.g., VAT, GST, sales tax)
• Determine customer location for tax purposes
• Maintain transaction records
• Fulfill reporting obligations

7. Security & Platform Integrity

We process Personal Data to:

• Protect against unauthorized access
• Monitor system performance
• Detect cyber threats
• Maintain secure infrastructure
• Conduct internal audits

8. Communications & Customer Support

We use Personal Data to:

• Respond to inquiries
• Provide transaction notifications
• Send service-related updates
• Manage complaints and disputes

9. Marketing & Business Development

We may use Personal Data to:

• Send product updates
• Inform you of service changes
• Share promotional communications

You may opt out of marketing communications at any time.

10. Legal Defense & Enforcement

We may process Personal Data to:

• Enforce our agreements
• Defend against legal claims
• Respond to regulatory investigations
• Comply with court orders

11. Corporate Transactions

If TransactBridge undergoes a merger, acquisition, restructuring, or financing transaction, Personal Data may be processed as part of due diligence or transferred as part of that transaction.

12. Aggregated & De-Identified Data

We may aggregate or anonymize Personal Data for:

• Analytics
• Product improvement
• Risk modeling
• Reporting

Such data does not identify individuals.

D. Disclosure of Personal Data to Third Parties

TransactBridge discloses Personal Data only where necessary to operate its Merchant-of-Record and payment services, comply with legal obligations, and protect its platform.

1. Payment & Financial Partners

We may share Personal Data with:

• Acquiring banks
• Payment processors and gateways
• Card networks
• Settlement and payout providers

This sharing is necessary to process transactions, manage chargebacks, and complete merchant settlements.

2. Service Providers

We may engage trusted third-party service providers to support our operations, including:

• Cloud hosting providers
• Fraud detection and risk monitoring vendors
• Identity verification (KYC/KYB) providers
• Tax calculation providers
• Analytics and infrastructure vendors

These providers are contractually required to process Personal Data only on our instructions and to implement appropriate security safeguards.

3. Merchants

Where TransactBridge acts as Merchant of Record, we may share limited transaction information with the underlying merchant to enable:

• Order fulfillment
• Customer support
• Refund handling
• Dispute resolution

Merchants are independently responsible for their own data protection compliance.

4. Compliance & Regulatory Authorities

We may disclose Personal Data:

• To comply with applicable laws and regulations
• In response to lawful requests from courts or authorities
• For AML, sanctions, or financial crime reporting

5. Professional Advisers

We may share Personal Data with legal, accounting, or audit advisers, subject to confidentiality obligations.

6. Corporate Transactions

In the event of a merger, acquisition, restructuring, financing, or asset sale, Personal Data may be disclosed as part of due diligence or transferred as part of the transaction, subject to appropriate safeguards.

7. No Sale of Personal Data

TransactBridge does not sell Personal Data and does not disclose Personal Data to third parties for unrelated advertising purposes.

E. International Transfers

TransactBridge operates globally and may transfer Personal Data across national borders in connection with providing its payment processing and Merchant-of-Record services.

1. Cross-Border Operations

Personal Data may be transferred to and processed in jurisdictions where TransactBridge or its service providers operate, including but not limited to:

• United States
• India
• European Union
• Other countries where financial institutions, cloud providers, or compliance partners are located

These jurisdictions may have data protection laws that differ from those in your country of residence

2. Safeguards for International Transfers

Where required by applicable data protection laws (including GDPR and similar frameworks), we implement appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs)
• Data transfer agreements
• Contractual confidentiality obligations
• Technical and organizational security measures

These safeguards are designed to ensure that Personal Data remains protected when transferred internationally.

3. Transfers for Compliance and Payment Processing

Because TransactBridge operates in a regulated financial environment, certain transfers may be necessary to:

• Process cross-border payments
• Conduct sanctions screening
• Perform fraud monitoring
• Comply with regulatory or reporting obligations

Such transfers are made in accordance with applicable legal requirements.

By using our Services, you acknowledge that your Personal Data may be transferred and processed internationally in accordance with this Policy.

F. Data Security

TransactBridge implements appropriate technical, administrative, and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.

1. Technical Safeguards

We maintain security measures that may include:

• Encryption of data in transit
• Secure infrastructure hosting environments
• Access controls and authentication mechanisms
• Network monitoring and intrusion detection
• Logging and audit controls

Payment information is processed through PCI-DSS compliant service providers.

2. Organizational Safeguards

We implement internal policies and controls, including:

• Role-based access restrictions
• Confidentiality obligations for personnel and contractors
• Risk assessments and compliance reviews
• Vendor due diligence procedures

Access to Personal Data is limited to authorized personnel who require it for legitimate business purposes.

3. Fraud & Risk Monitoring

Given our role as a cross-border payments platform, we maintain systems designed to:

• Detect suspicious activity
• Prevent fraud and financial crime
• Monitor chargeback and transaction risk patterns

4. No Absolute Security Guarantee

While we take reasonable steps to protect Personal Data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

G. Data Accuracy & Minimisation

TransactBridge takes reasonable steps to ensure that Personal Data is accurate, complete, and limited to what is necessary for the purposes for which it is processed.

1. Data Accuracy

We aim to:

• Maintain accurate and up-to-date records
• Correct inaccurate or incomplete Personal Data
• Provide mechanisms for individuals to update their information

Where appropriate, we may request that you confirm or update your information to ensure continued accuracy.

2. Data Minimisation

We collect and process only the Personal Data that is:

• Relevant and proportionate to the services provided
• Necessary for contractual, operational, or regulatory purposes
• Required for fraud prevention, AML, and compliance obligations

We do not collect excessive or unrelated Personal Data.

3. Ongoing Review

We periodically review the Personal Data we hold to ensure it remains:

• Necessary for legitimate business or legal purposes
• Retained in accordance with applicable data retention requirements

Data that is no longer required is securely deleted or anonymized in accordance with our retention practices.

H. Data Retention

TransactBridge retains Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

1. Retention Based on Business Relationship

We retain Personal Data:

• For the duration of an active customer or merchant relationship
• For as long as required to provide ongoing services or support
• To manage refunds, disputes, and chargebacks

2. Regulatory & Compliance Retention

As a cross-border payments platform, we are subject to financial, tax, and anti-money laundering (AML) regulations. Certain records, including identity verification and transaction data, may be retained for extended periods as required by applicable laws and payment network rules.

Retention periods may vary depending on:

• AML and financial crime regulations
• Tax and accounting requirements
• Dispute and chargeback timeframes
• Statutory limitation periods

3. Legal & Risk Management

We may retain Personal Data where necessary to:

• Defend or pursue legal claims
• Respond to regulatory inquiries
• Enforce contractual obligations

4. Deletion & Anonymization

When Personal Data is no longer required for legitimate business or legal purposes, we take reasonable steps to securely delete, anonymize, or de-identify the information in accordance with applicable law.

I. Your Legal Rights

Depending on your jurisdiction and applicable data protection laws, you may have certain rights in relation to your Personal Data.

1. Right of Access

You may request confirmation of whether we process your Personal Data and request access to the Personal Data we hold about you.

2. Right to Correction

You may request correction of inaccurate or incomplete Personal Data.

3. Right to Deletion

You may request deletion of your Personal Data where:

• The data is no longer necessary for its original purpose
• Processing is based on consent and you withdraw that consent
• Processing is unlawful

Please note that we may retain certain information where required by law (e.g., AML, tax, or regulatory obligations).

4. Right to Restrict or Object to Processing

You may request restriction of processing or object to certain processing activities, including processing based on legitimate interests, subject to applicable law.

5. Right to Data Portability

Where legally applicable, you may request a copy of your Personal Data in a structured, commonly used, and machine-readable format.

6. Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing conducted prior to withdrawal.

7. Right to Lodge a Complaint

You may have the right to lodge a complaint with a competent data protection authority in your jurisdiction.

8. Exercising Your Rights

To exercise your rights, please contact us at:

Email: legal@transactbridge.com

We may require verification of your identity before responding to requests. Certain rights may be limited where compliance would conflict with legal, regulatory, or contractual obligations.

J. Cookies and Similar Technologies

TransactBridge uses cookies and similar tracking technologies to operate, secure, and improve our website and services.

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help websites recognize your device and store certain information about your preferences or activity.

We may also use similar technologies such as web beacons, pixels, and local storage.

2. Types of Cookies We Use

i. Essential Cookies

These cookies are necessary for the operation of our website and services, including:

• Enabling secure login sessions
• Maintaining transaction integrity
• Preventing fraudulent activity
• Ensuring platform functionality

These cookies cannot be disabled without affecting core functionality.

ii. Security & Fraud Prevention Cookies

Used to:

• Detect suspicious behavior
• Prevent unauthorized access
• Protect against cyber threats

iii. Analytics Cookies

Used to:

• Understand website usage
• Improve user experience
• Monitor performance and errors

Analytics data may be aggregated and does not directly identify individuals.

iv. Functional Cookies

Used to:

• Remember user preferences
• Improve navigation and usability

3. Third-Party Cookies

Some cookies may be placed by trusted third-party service providers, such as analytics or security vendors. These providers are contractually obligated to safeguard data.

4. Managing Cookies

You may control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality and security of our Services.

Where required by law, we provide cookie consent mechanisms for non-essential cookies.

5. Updates

We may update our use of cookies from time to time to reflect changes in technology, law, or our services.

K. Direct Marketing

TransactBridge may use Personal Data to communicate information about our products, services, updates, and relevant business opportunities, where permitted by applicable law.

1. Marketing Communications

We may send communications relating to:

• Service updates and feature announcements
• Product launches
• Educational content and industry insights
• Promotional offers (where applicable)

Marketing communications may be delivered via email or other permitted channels.

2. Legal Basis

Where required by applicable data protection laws, we will:

• Obtain your consent before sending marketing communications; or
• Rely on legitimate interests where permitted for existing business relationships.

3. Opt-Out Rights

You may opt out of receiving marketing communications at any time by:

• Clicking the “unsubscribe” link in marketing emails; or
• Contacting us at legal@transactbridge.com

Opting out of marketing communications does not affect service-related or transactional communications necessary for account administration, compliance, or contractual performance.

4. No Sale of Data for Advertising

TransactBridge does not sell Personal Data to third parties for independent advertising purposes.

L. Children’s Data

TransactBridge’s Services are not directed to individuals under the age of 18 (or the age of majority in the applicable jurisdiction).

We do not knowingly collect Personal Data from minors. If we become aware that Personal Data has been collected from a minor without appropriate legal authorization, we will take reasonable steps to delete such information unless retention is required by law.

If you believe that a minor has provided us with Personal Data, please contact us at:

Email: legal@transactbridge.com

M. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our services or business operations
• Applicable legal or regulatory requirements
• Industry standards or best practices

When we make material changes, we will update the “Last Updated” date at the top of this Policy. Where required by law, we may provide additional notice.

Your continued use of our Services after any updates constitutes acknowledgment of the revised Policy.

N. Contact Information

For privacy inquiries or to exercise your privacy rights, contact:

• TransactBridge
• Website: www.transactbridge.com
• Email: legal@transactbridge.com