Altiras Pay Privacy Policy
This Privacy Policy explains how Altiras Pay collects, uses, stores, shares, protects, and otherwise processes information in connection with our website, merchant intake forms, pre-applications, underwriting-support services, high-risk merchant placement services, onshore and offshore acquiring-search services, compliance-support services, document-packaging services, communications, technology tools, AI-assisted workflows, and related services. By using our website, submitting information to Altiras Pay, communicating with us, completing a pre-application, providing documents, or engaging our services, you acknowledge that you have read and understand this Privacy Policy. This Privacy Policy should be read together with our Terms and Conditions, Restricted Merchant Policy, High-Risk Placement Disclosure, and any signed agreement, order form, statement of work, merchant disclosure, or compliance addendum between you and Altiras Pay.
1. Who We Are
Altiras Pay operates as a specialized consultancy and placement firm dedicated to high-risk merchant services. Our expertise lies in locating, establishing, and fine-tuning sophisticated payment infrastructures including international and domestic acquiring, gateway setup, and specialized processing channels designed specifically for companies in highly regulated or volatile industries. It is important to clarify that Altiras Pay does not act as a bank, a legal practice, a licensed payment processor, or a government oversight body. Our central role is acting as a strategic partner that organizes and transmits comprehensive merchant profiles to various financial institutions and technology providers for their internal underwriting reviews. Our internal workflow involves strict due diligence, ranging from deep-dive risk evaluations to regulatory reviews across multiple international jurisdictions. Because of these requirements, we collect more extensive and detailed information than a standard service provider would. The data we process includes high-level Know Your Business (KYB) and Know Your Customer (KYC) audits, assessments of chargeback history, and advanced screening for fraud mitigation. By structuring merchant information to meet the rigorous standards of global acquiring banks and sponsoring firms, we empower businesses to secure lasting processing capabilities while navigating the complex regulatory environments common in high-risk sectors.
2. Scope of This Privacy Policy
This Privacy Policy applies to information we collect through our website AltirasPay.ai, online forms, and merchant pre-applications. We gather data via underwriting and compliance questionnaires, document uploads, and professional communications including emails, phone calls, SMS or text messages, messaging platforms, and video calls. Our systems also process data through CRM systems, AI-assisted intake tools, and payment-processing placement workflows, including onshore, offshore, and international acquiring-search workflows. Furthermore, we collect information through provider-referral workflows, customer-support communications, and compliance-support services. Our data collection also includes third-party provider communications and information received from banks, acquirers, processors, gateways, payment facilitators, and sponsor banks. We may also receive data from risk, compliance, and data vendors. It is important to note that this Privacy Policy does not apply to third-party websites, banks, acquirers, processors, gateways, payment facilitators, sponsor banks, card brands, or any other third parties that maintain their own independent privacy policies.
3. Information We Collect
We collect information that is reasonably necessary to evaluate, prepare, package, refer, submit, support, monitor, or service a merchant file. This may include information about your business, owners, financial history, products and services, website, compliance posture, and related operational details.The specific categories of information we collect are described in the sections that follow, and are tailored to the type of merchant, risk profile, and provider requirements involved in a particular engagement.
4. Business and Merchant Information
Altiras Pay gathers comprehensive business data to satisfy the rigorous underwriting requirements of high-risk merchant services. We collect fundamental details such as legal and DBA names, physical locations including warehouses and fulfillment centers, and all digital touchpoints like website URLs, mobile apps, and social media profiles. To establish a complete merchant profile, we also require corporate formation documents, tax identifiers like EIN or VAT numbers, and a clear breakdown of ownership and operational history. These records are essential for demonstrating business legitimacy to domestic and international acquiring banks. Beyond basic identification, we perform a deep analysis of processing history and logistical operations to mitigate risk. This includes reviewing transaction volumes, ticket sizes, and historical rates for chargebacks and fraud, as well as examining shipping methods and geographic customer data. We also request information regarding your current and previous payment providers and any history of account terminations. By compiling this extensive data, we can effectively package your merchant file to secure stable processing infrastructure and maintain compliance across highly regulated global markets.
5. Owner, Principal, and Beneficial-Owner Information
To facilitate essential KYB and KYC reviews mandated by banks, global processors, and international acquirers, we must collect comprehensive data on individual principals, beneficial owners, and authorized signers. This includes personal identifiers such as full names, birth dates, residential addresses, and specific ownership stakes, alongside government-issued documentation like passports or social security numbers where underwriting standards require them. This identification process ensures that all control persons are properly vetted to meet the rigorous security expectations of our financial partners. Furthermore, we gather background details including credit authorizations, professional histories, and potential exposure to regulatory or legal actions to conduct deep-dive underwriting and risk assessments. This involves checking against sanctions lists, adverse media, and industry risk databases to prevent fraud and ensure strict legal compliance. By consolidating these sensitive details, Altiras Pay effectively packages merchant profiles for referral, enabling high-risk businesses to satisfy the identity verification and safety protocols necessary for securing stable processing environments.
6. Financial, Banking, and Processing Information
Altiras Pay gathers comprehensive financial and banking records to facilitate rigorous risk assessments and underwriting reviews. This includes detailed processing history, such as chargeback and refund reports, alongside corporate financial health indicators like balance sheets, profit and loss statements, and tax returns. We also collect banking infrastructure details, including routing and account numbers, settlement data, and correspondence regarding merchant account status or funding holds. These records are essential for evaluating transaction volume and projecting business revenue for our financial partners. Our data collection focuses on operational and risk-mitigation metrics such as gateway activity, processor statements, and any prior card-brand or termination notices. This information allows us to build a complete profile for onshore and offshore placement while ensuring compliance with global financial standards. It is important to note that we do not request or store sensitive cardholder authentication data, such as full card numbers or CVV codes, for our standard placement and support services.
7. Product, Service, Website, and Compliance Information
We gather extensive details regarding your products, services, and digital interactions to perform thorough compliance and operational evaluations. This process involves reviewing product catalogues, technical specifications like lab reports or ingredient lists, and legal documentation such as permits, regulatory licenses, or formal legal opinions relevant to various jurisdictions. By collecting this data, including specialized records for regulated industries like healthcare or gaming, we ensure your business meets the precise standards required for high-risk merchant placement. To facilitate a successful underwriting and compliance review, we also analyze your customer-facing presence and internal safety protocols. We examine website policies, subscription terms, marketing materials across social media, and communication logs to verify transparency and fairness in customer engagement. Furthermore, we assess operational security measures such as age verification, geofencing, and buyer qualification protocols. This comprehensive information is essential for packaging your merchant file accurately, helping financial institutions mitigate risks while securing stable processing channels for your specific business model.
8. High-Risk and Restricted-Category Information
For businesses operating in high-risk or restricted sectors, Altiras Pay gathers comprehensive documentation to facilitate specialized onshore and offshore processing solutions. This includes industries like nutraceuticals, supplements, wellness products, telemedicine, pharmacies, medical devices, and research-based chemicals. We also serve gaming and entertainment niches such as iGaming, social casinos, and adult content, along with highly regulated fields like CBD, hemp, crypto assets, and businesses related to alcohol or tobacco. Our expertise extends to service-based sectors including lead generation, telemarketing, debt collection, and credit repair, as well as high-ticket e-commerce models utilizing trial offers or continuity billing. To meet the rigorous underwriting standards of global and domestic providers, we must collect a deeper level of intelligence for these merchants. This process involves evaluating extensive legal permits, marketing materials, specific product licensing, and fulfillment workflows. By providing this detailed operational and compliance data, merchants in these volatile or cross-border categories can better navigate the complexities of identity verification and risk assessment required to secure stable payment infrastructures.
9. Communications Information
When you engage with us, we capture contact details like your name, email, phone number, and company, along with the specific substance of your messages and any shared files. This data includes records of our digital interactions, such as chat logs, SMS, emails, meeting summaries, video call data, and support history, as well as call recordings or voicemails where permitted. These entries are maintained within our CRM to track your preferences and consent. We use this communication data to address your requests, guide you through the application process, and manage your ongoing account relationship. By retaining these details, we can build a comprehensive merchant file to present to potential providers, maintain accurate business records, resolve any operational disputes, and refine the professional support services we offer to you.
10. Website, Device, Cookie, and Usage Information
When you visit our site, our systems automatically capture technical details including your IP address, browser and device specifications, and referring links. We also monitor your engagement on our pages, such as click patterns, form interactions, and general geographic data, alongside security signals that help us prevent fraudulent activity. This automated collection process relies on cookies, pixels, and various analytics tools to ensure our website remains functional and secure while improving the overall user experience. These technologies enable us to evaluate traffic flow and campaign performance while remembering your individual site preferences. We utilize these data points to uphold legal standards and maintain robust system integrity. In compliance with privacy regulations, we provide clear notifications regarding our use of these tools, ensuring you have access to the necessary settings to manage your consent or opt-out of specific tracking features at any time.
11. Information From Third Parties
We augment the data you share with details from a diverse network of external partners, including international and domestic financial institutions, payment processors, and underwriting gateways. This includes integrating insights from specialized risk management firms, fraud prevention services, and comprehensive compliance monitors that conduct rigorous KYB, KYC, and sanctions screenings. By accessing public records, corporate registries, and legal databases, we ensure a detailed understanding of your business landscape, supplemented by technical domain analysis and professional references from consultants or authorized representatives. These external insights are merged with the information we receive directly from your internal team, such as employees and owners, to create a holistic merchant file. Combining these varied datasets from lead generators, social media platforms, and credit bureaus allows us to facilitate more effective placement and support services for high-risk accounts. This integrated approach ensures that every application we manage is backed by a robust and verified profile, meeting the stringent requirements of global acquiring banks.
12. Sensitive Information
To meet specific financial and underwriting standards, Altiras Pay may collect sensitive information such as government-issued identification, social security numbers, and passport details. We also process comprehensive financial account data, ownership records, and legal or credit histories when authorized. This information is gathered solely when essential for identity verification, risk management, and regulatory compliance, and we do not use it to infer personal characteristics. In some cases, we may also handle health-related business documentation if your company operates in sectors like wellness or pharmacy. Our firm does not operate as a covered entity or business associate and does not knowingly collect protected health information (PHI) without a specific written agreement. Unless we have made such arrangements, merchants must not submit patient records, prescriptions, or other medical data. We prioritize the security of these details and only process them to fulfill legal obligations, facilitate service delivery, or satisfy the rigorous requirements of our financial providers and banking partners.
13. Payment Card Data
Altiras Pay does not require full payment card details to provide its ordinary merchant placement, underwriting support, or bank referral services. In the normal course of our work, we do not ask you to send us full card numbers, CVV codes, PINs, track data, magnetic-stripe data, or other sensitive authentication data. You are responsible for ensuring that your business complies with all applicable payment card security standards, including PCI DSS. You should not transmit unencrypted cardholder data or other sensitive payment information to Altiras Pay through email, messaging platforms, or other unsecured channels. If payment card data is accidentally provided to us, we may delete, restrict, or otherwise handle it in a manner designed to reduce risk and protect that information. Our role is to support high-risk merchant placement and related services, not to act as your payment processor or card data vault. You must maintain your own compliant systems and processes for collecting, storing, transmitting, and securing cardholder data in accordance with applicable laws, card brand rules, and industry standards.
14. How We Use Information
Altiras Pay uses the information it collects to operate its website, respond to inquiries, and evaluate whether merchants may be suitable for high-risk placement opportunities. We rely on this information to prepare intake files, organize underwriting packets, and identify potential onshore, offshore, and international acquiring options, gateways, payment facilitators, and sponsor banks that may be appropriate for a particular merchant profile. We also use information to verify business identity and ownership, review processing history, assess chargeback and fraud risk, and evaluate compliance readiness in light of card-brand rules, banking expectations, and applicable laws. Information may be used to coordinate with providers, respond to follow-up questions, collect supplemental documents, support account setup, and assist with ongoing account management or compliance monitoring where agreed. In addition, we use information for internal business purposes such as maintaining records, sending administrative notices and invoices, improving our services and workflows, training personnel, conducting analytics, and protecting the security and integrity of our systems. We may use information to prevent fraud, manage risk, enforce our agreements, resolve disputes, comply with legal and regulatory obligations, and support audits or other oversight activities. Where required, we will use information only in ways that are consistent with this Privacy Policy or with your consent.
15. How We Share Information
Altiras Pay shares information with third parties when it is reasonably necessary to provide our services, pursue merchant placement opportunities, or comply with legal, regulatory, and risk-management obligations. This may include sharing information with domestic and international banks, acquiring banks, payment processors, gateways, payment facilitators, sponsor banks, card-brand registration providers, and other financial or risk-management partners that independently evaluate whether to review, approve, decline, price, reserve, monitor, or service a merchant.We also share information with service providers and contractors that support our operations, such as cloud-hosting providers, CRM platforms, communication tools, document-management systems, analytics and security vendors, compliance and sanctions-screening providers, and professional advisors like auditors or legal counsel. These parties are expected to use information only as needed to perform services for Altiras Pay or as otherwise permitted by law.In addition, we may disclose information when we believe it is necessary or appropriate to comply with applicable law, respond to lawful requests from regulators or law enforcement, enforce our agreements, protect our rights or the rights of providers and merchants, prevent fraud or illegal activity, or manage disputes and claims. If Altiras Pay is involved in a merger, acquisition, financing, reorganization, or similar transaction, information may be shared or transferred as part of that process, subject to continued protection consistent with this Privacy Policy.
16. Onshore, Offshore, and International Sharing
Because Altiras Pay helps merchants explore both onshore and offshore acquiring options, information you provide may be shared with providers located outside your state, province, or country. This can include offshore banks, international acquiring banks, non-U.S. processors, cross-border gateways, overseas compliance vendors, and other payment or risk-management partners operating in different jurisdictions. By working with Altiras Pay and submitting information for high-risk placement, you acknowledge that your information may be transferred to, stored in, or accessed from countries that may have different data protection laws than your home jurisdiction. These cross-border transfers are made for the purpose of identifying and supporting potential merchant solutions, and we take reasonable steps to handle information in a manner consistent with this Privacy Policy and applicable law. Even when information is shared offshore or internationally, merchants remain responsible for ensuring that they have the legal right to provide such information to Altiras Pay and to the providers involved. Offshore or international placement does not exempt a merchant from complying with applicable privacy, consumer-protection, banking, AML, sanctions, gaming, healthcare, or other local-law requirements. Merchants should consult their own legal and compliance advisors to confirm that any cross-border data sharing is appropriate for their business.
17. Service Providers and Contractors
Altiras Pay relies on a range of service providers and contractors to help operate its business and deliver services to merchants. These partners may provide hosting, cloud storage, CRM and workflow tools, communication platforms, document-management systems, analytics and security services, identity verification, sanctions and adverse-media screening, billing and accounting support, and other operational functions that enable us to manage high-risk merchant files efficiently and securely. When we engage service providers and contractors, we expect them to use information only as needed to perform services on our behalf or as otherwise permitted by law. We take reasonable steps to select reputable providers, implement appropriate contractual protections, and limit access to information based on business need. These parties do not make independent decisions about merchant underwriting or placement; instead, they support Altiras Pay’s internal processes and infrastructure. Although we work to safeguard information shared with service providers and contractors, no system or vendor relationship is completely risk-free. Merchants should understand that the use of third-party tools and infrastructure is a standard part of modern underwriting support and compliance operations. We continually review and adjust our use of service providers and contractors to support security, privacy, and regulatory expectations in the high-risk payments ecosystem.
18. AI-Assisted Processing
Altiras Pay may use artificial intelligence and automation tools to help organize documents, summarize merchant files, prepare underwriting materials, and support internal workflows. These tools can assist with tasks such as extracting key data points, generating draft summaries, categorizing risk profiles, and streamlining communication templates, all with the goal of making high-risk merchant placement more efficient and consistent. AI-assisted processing does not replace independent human judgment by banks, acquirers, processors, or Altiras Pay. We do not use AI to make final underwriting, legal, regulatory, or medical decisions, and any materials prepared with AI support are subject to review and confirmation by our team and, where applicable, by the merchant. You remain responsible for reviewing the accuracy of information and documents before they are submitted to any provider. Merchants should only provide information they are authorized to share and should avoid transmitting unnecessary sensitive data through AI-enabled channels. We take reasonable steps to use AI tools in a manner consistent with this Privacy Policy and applicable law, but you should consult your own legal and compliance advisors if you have questions about how AI-assisted processing fits into your broader risk and privacy obligations.
19. Merchant Customer Data
In some cases, merchants may provide Altiras Pay with information about their own customers, leads, subscribers, or other end users in connection with high-risk placement, underwriting support, or compliance review. By providing such information, you represent that you have the legal right to share it, that you have given any required notices, and that you have obtained any required consents under applicable privacy, consumer-protection, marketing, and communications laws. Altiras Pay treats merchant customer data as part of the broader underwriting and compliance file, not as a standalone consumer database. We may review this information to help assess risk, evaluate marketing and disclosure practices, or respond to provider questions, but we do not act as your consumer-facing data controller, covered entity, or financial institution unless a separate written agreement expressly states otherwise. You remain responsible for complying with all laws that apply to your collection, use, and sharing of customer data, including rules governing email and SMS marketing, telemarketing, do-not-call lists, age and identity verification, healthcare or financial privacy, and any sector-specific requirements. Merchants should avoid sending unnecessary or overly sensitive customer records to Altiras Pay and should consult their own legal and compliance advisors about appropriate data-sharing practices.
20. Legal and Compliance Disclosures
Altiras Pay may disclose information when we believe it is necessary or appropriate to meet our legal, regulatory, or compliance obligations. This can include responding to subpoenas, court orders, regulatory examinations, law enforcement requests, card-brand inquiries, or information requests from banks, acquirers, processors, gateways, or sponsor banks involved in a merchant’s file. We may also share information when we need to enforce our agreements, protect our rights or the rights of providers and merchants, investigate suspected fraud or illegal activity, prevent transaction laundering or sanctions violations, or address security incidents and other forms of misconduct. These disclosures are made in a targeted manner, consistent with applicable law and the requirements of the parties involved. Because high-risk merchant placement often involves heightened scrutiny from banks, card brands, and regulators, merchants should expect that certain information may be reviewed or requested by these parties as part of their independent oversight. Altiras Pay’s role is to help coordinate and document these processes, not to override or limit the legal and compliance obligations of financial institutions, regulators, or other authorities.
21. Business Transfers
If Altiras Pay is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction, information we maintain may be transferred or disclosed as part of that process. Any successor, purchaser, or other party to the transaction may receive access to merchant files, underwriting records, communications, and related business information as a normal part of due diligence or post-closing operations.
In these situations, we aim to ensure that any party receiving information continues to handle it in a manner consistent with this Privacy Policy or provides a comparable level of protection. Where required by law, we may provide additional notice or obtain consent before information is transferred in connection with a business transaction.
A change in ownership or control of Altiras Pay does not automatically change your rights under this Privacy Policy. However, the new owner or affiliated entity may adopt updated terms or policies over time. We encourage merchants to review any new or updated privacy notices that may be provided following a corporate transaction.
22. Cookies and Tracking Technologies
Altiras Pay uses cookies and similar tracking technologies to help operate its website, improve user experience, and understand how visitors interact with our content. These technologies may collect information about your browser, device, pages viewed, time spent on the site, and interactions with forms or links. We use this information to maintain site functionality, enhance performance, support security and fraud prevention, and evaluate the effectiveness of our marketing and outreach efforts.
Some cookies are essential for the site to function properly, while others are used for analytics or to remember your preferences. Depending on your location and applicable law, you may have the ability to manage cookie settings through your browser or through tools we provide on the site. Disabling certain cookies may affect the availability or performance of some features.
Where required by law, we will provide additional notices or options regarding cookies, analytics, targeted advertising, or similar tracking activities. These tools are used to support Altiras Pay’s business operations and do not change the core ways in which we collect, use, or share information as described in this Privacy Policy.
23. Data Retention
Altiras Pay retains information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy and to support our legal, regulatory, and business obligations. Retention periods may vary depending on the type of information, the nature of the merchant engagement, provider requirements, card-brand rules, and applicable laws governing records, audits, and dispute resolution.
In general, we may keep merchant files, underwriting records, communications, consent logs, and related compliance documentation for extended periods to support risk management, fraud prevention, legal defense, and regulatory inquiries. This can apply whether a merchant is ultimately approved, declined, or chooses not to proceed with a particular provider.
When information is no longer needed for the purposes described above, we may delete it, de-identify it, aggregate it, or archive it in a secure manner, subject to any additional retention requirements imposed by law, contract, card brands, or financial institutions. Merchants should understand that certain records cannot be deleted immediately if they are necessary for ongoing legal, regulatory, or risk-management purposes.
24. Data Security
Altiras Pay uses a combination of administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, password and authentication requirements, encryption where appropriate, secure storage and transmission practices, vendor due diligence, staff training, and procedures that limit access to information based on business need. While we work to maintain a security program that is appropriate for high-risk merchant underwriting and compliance operations, no system or method of transmission is completely secure.
We cannot guarantee absolute security of information, and merchants should use care when deciding what to send to us and how to transmit it. In particular, you should avoid sending unnecessary sensitive information or unencrypted payment card data, medical records, or other highly confidential materials unless specifically requested and transmitted through a secure channel. If we become aware of a security incident involving information under our control, we will evaluate the situation and take steps we believe are appropriate in light of the nature of the information, the risk of harm, and our legal and contractual obligations. Where required by law, we may provide notice to affected individuals, regulators, providers, or other parties. Merchants are also expected to notify Altiras Pay promptly if they become aware of a breach or incident that could affect information shared with us or with providers.
25. Your Privacy Rights
Depending on where you live and the laws that apply, you may have certain rights regarding your personal information. These can include the right to know whether we process your information, to access or receive a copy of it, to request corrections to inaccurate details, or to ask that certain information be deleted, subject to legal, contractual, and risk-management obligations that may require us to retain some records.
In some jurisdictions, you may also have rights to object to or limit certain types of processing, to opt out of specific uses of your information (such as certain analytics or targeted advertising activities), or to withdraw consent where our processing is based on your consent. You may have the right to appeal a denied privacy request and the right not to be discriminated against for exercising your privacy rights, as provided by applicable law.
Because Altiras Pay primarily supports business and underwriting relationships, some privacy rights may not apply to all categories of information we maintain, particularly where records must be retained for legal, regulatory, card-brand, or provider requirements. We will evaluate each request in light of the laws that apply, the nature of the information, and our obligations to banks, acquirers, processors, and other stakeholders in the high-risk payments ecosystem.
26. How to Submit a Privacy Request
If you wish to exercise a privacy right that may be available to you, such as requesting access to your information, asking for corrections, or seeking deletion of certain records, you can contact Altiras Pay using the details provided in this Privacy Policy. When you submit a request, please include your full name, contact information, company name (if applicable), your relationship to Altiras Pay, and a clear description of the right you wish to exercise. We may ask for additional information to verify your identity or authority before responding to a request, particularly where the information at issue relates to business owners, principals, or other individuals involved in high-risk underwriting. This verification process helps protect against unauthorized access or changes to sensitive records. Altiras Pay will review and respond to privacy requests within the timeframes required by applicable law, taking into account the nature of the request, the type of information involved, and our legal, contractual, and risk-management obligations. In some cases, we may be unable to fully comply with a request if doing so would conflict with our obligations to banks, acquirers, processors, regulators, or other stakeholders, or if records must be retained for legal or compliance reasons.
27. Appeals
If we deny or partially deny a privacy request, you may have the right under certain laws to appeal our decision. To submit an appeal, please contact Altiras Pay using the same channels provided for privacy requests and clearly indicate that your communication is an appeal. Include a copy of your original request, our response, and a brief explanation of why you believe the decision should be reconsidered. We will review appeals in light of applicable law, our obligations to banks, acquirers, processors, and regulators, and the nature of the information involved. In some cases, we may uphold our original decision if we determine that retaining or limiting access to certain records is necessary for legal, regulatory, card-brand, or risk-management reasons. Where required by law, if your appeal is denied, we will inform you of any additional options that may be available, such as contacting a supervisory authority or regulator. Because Altiras Pay operates primarily in a business and underwriting context, the specific appeal rights and processes available to you may depend on your jurisdiction and relationship with us.
28. Do Not Sell or Share
Altiras Pay does not sell personal information for money, and we do not sell merchant underwriting files, owner identity documents, bank statements, processing statements, legal opinions, or compliance materials. Our core business is to support high-risk merchant placement and underwriting, not to monetize sensitive merchant data as a standalone product. We may share information with banks, acquirers, processors, gateways, payment facilitators, sponsor banks, offshore and international providers, and specialized risk or compliance vendors when such sharing is reasonably necessary to perform the services you request. This type of sharing is part of the merchant-placement and underwriting-support process and is distinct from selling information for independent commercial use. In some jurisdictions, certain analytics, advertising, or cross-context behavioral tracking activities may be treated as a “sale” or “sharing” of personal information under applicable law. Where those rules apply, you may have the right to opt out of such activities. If we offer tools or contact methods for exercising these rights, they will be described in this Privacy Policy or on our website. Exercising an opt-out for analytics or advertising does not prevent us from sharing information that is necessary to provide our services or to meet legal and compliance obligations.
29. Global Privacy Control and Opt-Out Signals
Where required by applicable law, Altiras Pay will make commercially reasonable efforts to recognize and honor browser-based opt-out preference signals, such as Global Privacy Control (GPC), for the browser or device through which the signal is sent. These signals may affect certain analytics, advertising, or cross-context behavioral tracking activities that are treated as a “sale” or “sharing” of personal information under relevant privacy laws.
Because our core services involve sharing merchant information with banks, acquirers, processors, gateways, payment facilitators, and other providers at your request, a browser-based opt-out signal does not prevent us from using or disclosing information that is reasonably necessary to perform those services or to meet legal, regulatory, or risk-management obligations. Opt-out signals apply only to the specific browser or device where they are enabled and may not automatically carry over to other browsers, devices, or contexts.
If you have questions about how opt-out signals or other privacy choices apply to your relationship with Altiras Pay, you can contact us using the details provided in this Privacy Policy. We will evaluate your inquiry in light of applicable law and the nature of the services we provide to you as a high-risk merchant or related business.
30. Data Minimization
Altiras Pay aims to collect only the information that is reasonably necessary to support high-risk merchant placement, underwriting, compliance review, and related services. The scope and depth of information we request may vary based on your industry, risk profile, geographic footprint, provider requirements, and the specific solutions you are pursuing. Because high-risk categories often involve enhanced due diligence, we may need more detailed documentation than a typical low-risk merchant services engagement. Even so, we work to focus our requests on information that is relevant to evaluating your business, preparing underwriting materials, and meeting legal, regulatory, and card-brand expectations. Merchants should avoid sending unnecessary or unrelated information, particularly highly sensitive records that are not requested or required for the services being provided. If you have questions about whether certain documents or data points are needed, you can contact Altiras Pay for clarification before sharing them.
31. Changes to This Privacy Policy
Altiras Pay may update this Privacy Policy from time to time to reflect changes in our services, our practices, or applicable laws and regulations. When we make material updates, we will revise the effective date at the top of the policy and may provide additional notice where required, such as by posting a prominent notice on our website or contacting you through available communication channels. Any updated Privacy Policy will apply to information we handle after the effective date of the revised version, as well as to certain existing records where continued use or retention is necessary for legal, regulatory, or business reasons. We encourage you to review this Privacy Policy periodically so that you remain informed about how Altiras Pay collects, uses, and protects information in connection with high-risk merchant placement and related services. Your continued use of our website or services after an updated Privacy Policy is posted means that you acknowledge and accept the revised terms, subject to any additional consent requirements that may apply under relevant privacy laws. If you do not agree with the updated policy, you should discontinue using our services and may contact us with any questions or concerns.
32. Contact Us
If you have questions or concerns about this Privacy Policy, Altiras Pay’s data practices, or how your information is handled in connection with high-risk merchant placement and related services, you can contact us using the details provided on our website or in this policy. When you reach out, please include enough information for us to understand your inquiry and, if applicable, to locate relevant records. We may ask follow-up questions or request additional details so that we can respond accurately and in a manner consistent with our legal, regulatory, and contractual obligations. Communications with Altiras Pay about privacy or data protection do not create an attorney–client relationship or any special fiduciary duty, but we will handle your inquiry in line with this Privacy Policy and our role as a specialized high-risk merchant services agency. If your question relates to specific legal or regulatory requirements that apply to your business, you should also consult your own legal, compliance, or risk advisors. Altiras Pay does not provide legal advice and does not replace the role of independent counsel, regulators, or financial institutions in interpreting or enforcing applicable laws and rules.
33. Children’s Privacy
Altiras Pay’s services are intended for businesses and adults involved in high-risk merchant operations, not for children. We do not knowingly collect personal information from children under the age of 13, and our website, intake forms, and underwriting processes are not designed to attract or engage children. If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete that information or otherwise limit its use in accordance with applicable law. Merchants and other users should not submit children’s information, student records, or similar data to Altiras Pay unless it is legally permitted, specifically requested, and clearly necessary for the services being provided. If you believe that a child’s information has been provided to Altiras Pay inappropriately, please contact us using the details in this Privacy Policy so that we can review and address the situation. We may work with you, and where required with regulators or other authorities, to take appropriate steps to protect the privacy and safety of the child involved.
34. Merchant Privacy Certification
By submitting information to Altiras Pay, you represent and certify that you are authorized to provide the information, that it has been collected lawfully, and that any required notices and consents have been obtained. You confirm that you have the right to permit Altiras Pay to use and share the information with domestic, offshore, and international providers for the purpose of evaluating and supporting high-risk merchant placement opportunities. You also agree that you will not intentionally submit unnecessary or inappropriate sensitive information, such as full payment card data, protected health information, or other highly confidential records, unless specifically requested, legally permitted, and transmitted through a secure method. You remain responsible for the accuracy of the information you provide and for promptly notifying Altiras Pay if you become aware of errors, unauthorized submissions, or material changes. By continuing to work with Altiras Pay, you acknowledge that providers may conduct their own independent KYB, KYC, credit, background, sanctions, adverse-media, risk, fraud, compliance, website, and underwriting reviews. Altiras Pay’s role is to help organize and present your information to potential providers; it does not guarantee approval, specific terms, or outcomes, and it does not replace the independent judgment or obligations of banks, acquirers, processors, or regulators.
35. California Privacy Notice
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). In general, Altiras Pay may collect identifiers, business and contact information, commercial and financial information, internet or network activity, geolocation derived from IP address, professional or employment-related information, and limited sensitive personal information where necessary for underwriting, identity verification, fraud prevention, and compliance. We collect this information from you, your business, your representatives, financial institutions, processors, gateways, compliance vendors, public records, and other sources described in this Privacy Policy. We use and disclose it for the business purposes outlined above, including merchant placement, underwriting support, risk review, compliance, security, analytics, and service improvement. We do not sell merchant underwriting files, owner identity documents, bank statements, or similar materials for money. California residents may have the right to know what personal information we collect, use, disclose, sell, or share; to request access, correction, or deletion; to opt out of certain sales or sharing; to limit certain uses of sensitive personal information; and not to be discriminated against for exercising their rights. To exercise these rights, you can contact us using the methods described in this Privacy Policy. We will evaluate and respond to requests in accordance with California law and our obligations to financial institutions, regulators, and other stakeholders.
36. International Privacy Rights
If you are located outside the United States, you may have additional privacy rights under the laws of your jurisdiction. Depending on where you are based, these rights can include access to your information, correction of inaccurate data, deletion or restriction of certain processing, objection to specific uses, data portability, and the ability to withdraw consent where processing is based on consent. Where laws such as the EU General Data Protection Regulation (GDPR) or the UK GDPR apply, Altiras Pay will identify an appropriate legal basis for processing, which may include performance of a contract, legitimate interests, legal obligations, or your consent. Our legitimate interests typically relate to operating our business, supporting high-risk merchant placement, managing risk and compliance, and improving our services. International users should understand that information may be transferred to and processed in the United States or other countries that may not provide the same level of data protection as their home jurisdiction. We take reasonable steps to handle cross-border transfers in a manner consistent with this Privacy Policy and applicable law, but you should consult your own legal and compliance advisors if you have questions about how international privacy rights apply to your relationship with Altiras Pay.
37. Nevada Privacy Rights
If you are a Nevada resident, you may have certain rights under Nevada law related to the sale of covered information. Altiras Pay does not sell covered information as traditionally understood for monetary consideration, and our business model focuses on high-risk merchant placement and underwriting support rather than selling personal data. If Nevada law provides you with the right to opt out of any future sale of covered information, you may submit such a request using the contact details provided in this Privacy Policy. Please include your name, contact information, and a clear statement that you are a Nevada resident requesting to exercise your opt-out rights under Nevada law. We will review and respond to Nevada privacy requests in accordance with applicable law and our obligations to financial institutions, regulators, and other stakeholders. Exercising an opt-out right under Nevada law does not prevent us from using or sharing information as reasonably necessary to provide our services, support underwriting and compliance, or meet legal and regulatory requirements.
38. Do Not Track
Some web browsers offer a “Do Not Track” (DNT) setting or similar signals intended to indicate a user’s preference not to be tracked across websites over time. At this time, there is no uniform industry standard governing how to respond to these signals, and Altiras Pay does not currently change its practices in response to all DNT signals. Where required by applicable law, we will recognize and honor legally mandated opt-out preference signals, such as certain browser-based controls or platform settings, in connection with activities that may be treated as a “sale,” “sharing,” or targeted advertising. These mechanisms are distinct from traditional DNT signals and are evaluated in light of the specific legal requirements that apply. Regardless of how DNT or similar signals are handled, Altiras Pay continues to use and share information as reasonably necessary to operate its website, support high-risk merchant placement and underwriting, manage risk and compliance, and meet legal and regulatory obligations. If you have questions about how your browser settings interact with our data practices, you can contact us using the details in this Privacy Policy.
39. Cross-Border Data Transfers
Because Altiras Pay works with domestic, offshore, and international providers, information you share with us may be transferred to, stored in, or accessed from countries other than the one in which it was originally collected. These cross-border transfers are an inherent part of identifying and supporting high-risk merchant placement options, including onshore and offshore acquiring, international gateways, and specialized compliance or risk vendors. We take reasonable steps to handle cross-border transfers in a manner consistent with this Privacy Policy and applicable law, which may include contractual protections, technical safeguards, and organizational measures designed to support lawful transfers. However, data protection laws in other countries may differ from those in your home jurisdiction and may provide a different level of protection. You are responsible for ensuring that you have the legal right to provide information to Altiras Pay for potential cross-border sharing with providers. If you have questions about how cross-border data transfers apply to your business or regulatory environment, you should consult your own legal and compliance advisors in addition to reviewing this Privacy Policy.
40. Employment and Contractor Information
If you apply to work with Altiras Pay as an employee, contractor, or consultant, we may collect information such as your name, contact details, resume or CV, work history, education, references, tax and payment details, and any background-check information you authorize. We use this information to evaluate your candidacy, manage the recruiting and onboarding process, administer compensation and benefits, and comply with employment, tax, and other legal obligations. Employment and contractor information is handled separately from merchant underwriting files, although some roles may involve access to sensitive merchant or provider data. In those cases, we may implement additional screening, confidentiality obligations, and access controls to protect the information entrusted to us. If you have questions about how your information is handled in connection with an employment or contractor relationship, you can contact us using the details in this Privacy Policy. Additional notices or policies may apply to employees or contractors, and those documents will govern to the extent they provide more specific information about internal HR or workforce data practices.
41. Links to Third-Party Sites
Altiras Pay’s website, communications, or application materials may include links to third-party websites, platforms, banks, acquirers, processors, gateways, payment facilitators, compliance vendors, legal resources, or other external services. These third parties operate independently from Altiras Pay and maintain their own privacy policies, terms of use, and security practices. We provide links to third-party sites for convenience, information, or as part of the merchant placement and underwriting process, but we do not control and are not responsible for the content, data practices, or security measures of those third parties. When you follow a link to another site or service, any information you provide is governed by that party’s policies, not by this Privacy Policy. Before sharing information with a third party, you should review its privacy policy, terms, and security practices to ensure they are acceptable for your business and risk profile. Altiras Pay is not liable for any loss, misuse, or unauthorized access that may occur as a result of your interactions with third-party sites or services that we do not control.
42. Communications, SMS, and Email Preferences
Altiras Pay may contact you by email, phone, SMS, or other electronic means in connection with inquiries, merchant applications, underwriting requests, document follow-ups, provider questions, service updates, invoices, compliance matters, or account support. These communications are an integral part of supporting high-risk merchant placement and related services. You may opt out of marketing or promotional emails by using the unsubscribe link included in those messages or by contacting us using the details in this Privacy Policy. You may opt out of SMS messages by following the instructions provided in the message (such as replying STOP) or by reaching out to us directly. Even if you opt out of marketing communications, we may still send transactional, service-related, legal, or compliance notices that are necessary to manage your relationship with Altiras Pay. Merchants are responsible for ensuring that their own email, SMS, telemarketing, and other outreach practices comply with applicable laws, including rules governing consent, do-not-call lists, 10DLC registration, and carrier or platform requirements. Altiras Pay’s communications with you do not replace your independent obligations to manage your own customer and prospect communications lawfully.
43. Accuracy of Information
Altiras Pay relies on the accuracy and completeness of the information you provide when evaluating high-risk merchant opportunities, preparing underwriting materials, and communicating with potential providers. You are responsible for ensuring that all information submitted to us is truthful, current, and not misleading, and for promptly updating us if material details change over time. Providing inaccurate, incomplete, or outdated information can affect our ability to support your placement efforts and may lead to delays, denials, or adverse decisions by banks, acquirers, processors, or other providers. In some cases, knowingly providing false or misleading information may also raise legal, regulatory, or contractual concerns. If you discover that information previously submitted to Altiras Pay is incorrect or no longer accurate, you should notify us as soon as possible and provide corrected or updated details. We will work with you to update relevant records and, where appropriate, to communicate changes to providers that are actively reviewing your file.
44. Governing Law and Jurisdiction
This Privacy Policy, and any disputes or claims arising out of or relating to it, will be governed by and construed in accordance with the laws applicable to Altiras Pay’s principal place of business, without regard to conflict-of-law principles that would result in the application of the laws of another jurisdiction. The specific governing law and venue may also be defined in your engagement agreement, terms of use, or other contract with Altiras Pay. To the extent permitted by law, any disputes or claims relating to this Privacy Policy, Altiras Pay’s data practices, or the services we provide shall be resolved in the courts or dispute-resolution forums specified in your agreement with us, or, if none is specified, in the courts located in the jurisdiction of our principal place of business. You agree to submit to the personal jurisdiction of those courts for purposes of resolving such disputes. Nothing in this section limits any rights or remedies that may be available to you under applicable privacy, consumer-protection, or financial-services laws. Merchants should consult their own legal counsel to understand how governing law and jurisdiction provisions apply to their specific relationship with Altiras Pay.
45. Data Disposal
When information is no longer reasonably necessary for the purposes described in this Privacy Policy, Altiras Pay may delete it, de-identify it, aggregate it, or archive it in a secure manner. Our approach to data disposal takes into account legal, regulatory, contractual, card-brand, and financial-institution requirements, as well as our obligations related to audits, dispute resolution, fraud prevention, and risk management. Because high-risk merchant placement and underwriting often involve long-tail risk and regulatory oversight, certain records may need to be retained for extended periods even after a particular engagement ends or a merchant is declined. In those cases, we will limit access and use of the information to what is necessary for ongoing legal, compliance, or risk-related purposes. Merchants should understand that not all information can be deleted on request if doing so would conflict with our obligations to banks, acquirers, processors, regulators, or other stakeholders. If you have questions about how data disposal applies to your relationship with Altiras Pay, you can contact us using the details provided in this Privacy Policy.
46. Reservation of Rights
Altiras Pay reserves the right to interpret and apply this Privacy Policy in a manner consistent with our legal, regulatory, and contractual obligations, as well as the practical realities of high-risk merchant placement and underwriting. Nothing in this policy is intended to limit our ability to comply with applicable laws, respond to lawful requests from regulators or financial institutions, or take actions we believe are necessary to protect our business, providers, merchants, or consumers from fraud, abuse, or other harm. We may, in our discretion and where permitted by law, decline to process certain requests, limit the scope of disclosures, or retain information longer than requested if we determine that doing otherwise would conflict with our obligations to banks, acquirers, processors, gateways, card brands, regulators, or other stakeholders. In such cases, we will act in good faith and in a manner that is reasonably aligned with this Privacy Policy and the expectations of the parties involved. This Privacy Policy does not create any contractual right to services, approval, or specific outcomes, nor does it modify any separate agreement you may have with Altiras Pay. In the event of a conflict between this Privacy Policy and a written contract, the contract will generally control with respect to the subject matter it addresses, while this Privacy Policy will continue to govern our data-handling practices more broadly.
47. Interpretation
This Privacy Policy is intended to provide a clear and practical explanation of how Altiras Pay handles information in connection with high-risk merchant placement, underwriting support, and related services. Headings and section titles are for convenience only and do not limit or expand the substantive meaning of any provision. If any part of this Privacy Policy is found to be invalid, unlawful, or unenforceable under applicable law, the remaining provisions will continue in full force and effect. Any invalid or unenforceable term will be interpreted, modified, or replaced to the minimum extent necessary to make it valid and enforceable while preserving, as closely as possible, the original intent. In the event of any inconsistency between this Privacy Policy and other notices or disclosures provided by Altiras Pay, this Privacy Policy will generally govern our data-handling practices, while more specific terms in a written contract or regulatory notice may control with respect to the particular subject matter they address.
48. No Legal, Tax, or Compliance Advice
Altiras Pay provides specialized support for high-risk merchant placement, underwriting preparation, and related advisory services, but we do not provide legal, tax, accounting, or regulatory advice. Any information, templates, checklists, or comments we share about laws, regulations, card-brand rules, or compliance expectations are for general informational purposes only and should not be relied upon as a substitute for advice from qualified professionals. You are responsible for consulting with your own legal counsel, tax advisors, compliance officers, or other qualified professionals to understand how applicable laws, regulations, and industry standards apply to your business. Decisions about product offerings, marketing practices, website content, disclosures, and operational controls should be made in consultation with those advisors, not solely on the basis of materials or guidance provided by Altiras Pay. Working with Altiras Pay does not create an attorney–client relationship, a tax advisor relationship, or any special fiduciary duty. Our role is to help organize and present your information to potential providers and to support the underwriting and placement process, while you and your advisors remain responsible for ensuring that your business complies with all applicable legal and regulatory requirements.
49. Effective Date
This Privacy Policy is effective as of the date indicated at the top of the policy. Altiras Pay may update or revise this Privacy Policy from time to time, and any changes will take effect on the new effective date stated. We encourage you to review the effective date whenever you revisit this page so you can determine whether the policy has been updated since your last review. Your continued use of Altiras Pay’s website or services after the effective date of an updated Privacy Policy means that you acknowledge and accept the revised terms, subject to any additional consent requirements that may apply under applicable law. If you do not agree with the terms of this Privacy Policy or any updates, you should discontinue using our services and may contact us with questions or concerns. For clarity, the effective date does not limit our ability to retain or use information collected before that date where such retention or use is permitted or required by law, contract, card-brand rules, or financial-institution requirements. We will continue to handle all information in accordance with the version of this Privacy Policy that applies at the relevant time.
50. Merchant Acknowledgment
By continuing to use Altiras Pay’s website or services, submitting information to us, or engaging with us in connection with high-risk merchant placement and underwriting support, you acknowledge that you have read and understand this Privacy Policy. You agree that Altiras Pay may collect, use, share, and retain information as described here, subject to applicable laws and any additional rights you may have under those laws. You further acknowledge that Altiras Pay’s role is to help organize, present, and support your information for review by potential providers, and that final decisions about approval, pricing, reserves, processing limits, and ongoing monitoring are made independently by banks, acquirers, processors, gateways, payment facilitators, sponsor banks, and other financial institutions. Altiras Pay does not guarantee any particular outcome or provider decision. If you do not agree with this Privacy Policy or any updates to it, you should discontinue using Altiras Pay’s services and may contact us with questions or concerns. Your continued engagement with Altiras Pay after changes take effect constitutes your acknowledgment of the updated policy and your agreement that we may handle information in accordance with its terms.