AlphaPay Privacy Policy

Last Updated: April 16, 2025

1. Introduction

AlphaPay (“we”, “our” or “us”) provides payment processing and aggregation services to merchants across Canada. For the purposes of applicable privacy legislation, AlphaPay acts as the data controller for the personal information we collect and process through our services and website.

We are committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and ensuring transparency and protection in the handling of personal information. This policy explains how we collect, use, disclose, and retain your personal information.

2. Scope of Application

This Privacy Policy applies to personal information that AlphaPay may collect from you during your interactions with us. These interactions include, but are not limited to:

1)        Submitting an application or signing up for AlphaPay services

2)        Communicating with our staff or systems via the website, mobile app, email, or phone

3)        Requesting customer service or support

4)        Accessing or browsing any AlphaPay-managed online platform

3. What Personal Data We Collect

AlphaPay collects only necessary information from merchants and their representatives to fulfill legal, regulatory, and service-related obligations.

We do not collect personal data without consent from end users (consumers) transacting with merchants.

a. Data collected directly:

To access and use AlphaPay services, merchants and their authorized representatives are required to provide the following information:

1)        Name, email, and phone number

2)        Business name, physical address, and official registration documents

3)        Banking information for settlement and disbursement purposes

4)        Ultimate Beneficial Owner (UBO) details (if applicable)

5)        Identity verification documents

b. Automatically collected:

We automatically collect certain technical information when you interact with AlphaPay Services. This includes details about the type of device you use, your operating system and software version, browser type, IP address, approximate location, and interaction behavior such as pages visited and features used. This information is typically gathered through cookies or similar technologies.

We use this data to maintain and enhance the stability, security, and usability of our services, and to better understand usage trends to improve functionality. You can manage your cookie preferences through your browser settings or opt-out interface when prompted.

c. Data from Third Parties:

We may also collect relevant information about you from third-party sources, including:

1)        Credit reporting agencies and KYC service providers, to verify identity and fulfill compliance requirements

2)        Financial institutions and payment partners, in connection with transactions or onboarding

3)        Business partners who are authorized to share such information in accordance with legal obligations or contracts

4)        Social media platforms, when you voluntarily interact with AlphaPay’s official channels, participate in promotional programs, or when such data is required for fraud analysis or investigation

4. How We Use Your Information

We use your information for the following purposes:

Purpose

Description

Service delivery

To process merchant onboarding, payments, and settlements

Compliance

To meet KYC, AML, tax, and regulatory obligations

Risk & fraud prevention

Screening for fraudulent or suspicious activities

Communication

To notify merchants of product or security updates

Customer support

Respond to inquiries and provide technical help

Marketing (with consent)

Newsletters or product updates if opted in

5. End User Data Clarification

AlphaPay does not collect personal data from end consumers. Transactions are processed using tokenized identifiers provided by upstream platforms. If users voluntarily provide personal data (e.g. for marketing or activity participation), AlphaPay will obtain explicit consent and limit usage strictly to the permitted scope.

6. Legal Basis for Processing

AlphaPay processes personal information only where there is a valid legal basis to do so under applicable privacy laws such as PIPEDA and, where applicable, the GDPR. These legal bases include:

1)        Performing contractual obligations (e.g., account onboarding, service provision)

2)        Meeting regulatory and legal compliance requirements

3)         Preventing fraud and ensuring security

4)        Providing operational functionality and improving user experience

7. Consent Management

We seek express or implied consent for personal data collection based on context:

– Express consent for optional features (e.g., marketing)
– Implied consent when information is voluntarily provided for onboarding

Withdrawal of consent can be requested anytime via info@alphapay.com

Consent and Children: AlphaPay does not knowingly collect personal data from individuals under the age of 19. If such data is inadvertently collected, it will be promptly deleted. Individuals under the age of majority must obtain permission from a parent or guardian before using AlphaPay services.

8. Data Sharing & Disclosure

We never sell your data. We may share personal data only under the following circumstances:

1)        With trusted third parties (e.g., payment processors, identity verification services, cloud storage, risk analytics, legal advisors) bound by confidentiality agreements

2)        With regulators or authorities under legal obligation (e.g., FINTRAC, CRA)

3)        With Partner channels (e.g., UnionPay, Alipay, WeChat Pay, Visa, Mastercard) for transaction routing

4)        In business transitions (e.g., mergers or acquisitions)

9. Data Retention

AlphaPay will store your Personal Data as long as it is necessary to provide the service and to comply with applicable laws and regulations. Typically, financial transaction data is retained for a minimum of 7 years in accordance with tax and anti-money laundering regulations. When it is no longer necessary to retain Personal Data, it is securely deleted using industry best practices.

10. Safeguards & Security

AlphaPay takes the protection of Personal Data very seriously. Technical and organizational measures include:

– Data encryption in transit (TLS 1.2 or higher) and at rest (AES-256)
– Hashed and salted password storage using SHA-256
– Role-based access controls and multi-factor authentication
– Network monitoring and intrusion detection
– Regular vulnerability assessments and penetration tests

These safeguards ensure Personal Data is protected from loss, theft, misuse, and unauthorized access.

11. Your Rights

You have the following rights regarding your data, in accordance with applicable privacy laws:

1)        Right of Access: You may request a copy of the personal data we hold about you.

2)        Right to Rectification: You may inform us of any inaccuracies or request correction of incomplete or inaccurate personal data.

3)        Right to Erasure: Subject to legal and regulatory retention requirements, you may request that we delete your data. In some cases, this may affect our ability to provide services.

4)        Right to Restrict Processing: You may request that we limit how your data is used, for example, while accuracy is being verified.

5)        Right to Data Portability: Where technically feasible, you may request that we forward your data to you or a third party in a commonly used and machine-readable format.

6)        Right to Withdraw Consent: If we rely on your consent to process your data (e.g., for marketing), you may withdraw that consent at any time without affecting the lawfulness of processing prior to the withdrawal.

7)        Right to Object: Where applicable, you may object to the processing of your data based on our legitimate interests.

To exercise any of these rights, please contact us at info@alphapay.com. We will respond to all data access, correction, or deletion requests within 30 days. If additional time is needed, we will inform you within the original timeframe. 

12. Changes to This Policy

We may update this policy to reflect regulatory changes or operational updates. The “Last Updated” date will reflect the latest version. Continued use of services after changes constitutes acceptance.

13. Contact Information

Questions or requests regarding this policy may be directed to:

Email: info@alphapay.com 
Mailing Address: 13888 Wireless Way Unit 301, Richmond, BC V6V 0A3, Canada 
Attn: Privacy Officer