Privacy Policy

OptiPay360, a platform operated by Optimum Payment Solutions
Effective Date: June 23, 2026  |  Last Updated: June 23, 2026

1. Introduction

This Privacy Policy describes how Optimum Payment Solutions ("Optimum," "we," "us," or "our"), operator of the OptiPay360 platform ("OptiPay360," the "Platform," or the "Service"), collects, uses, discloses, and protects information. By accessing or using the Platform, you agree to the practices described in this Policy.

OptiPay360 is a payment and business management platform provided to merchants and other businesses ("Merchants," "you," or "your"). This Policy applies both to Merchants who use the Platform and to information about Merchants' own customers ("End Customers") that is processed through the Platform.

Two-tier data relationship. We act as a data controller with respect to the account, business, and personal information of Merchants who use the Platform. We act as a data processor / service provider with respect to End Customer information that Merchants enter into or process through the Platform — Merchants are responsible as the controller of their own customers' data. Merchants are responsible for having a lawful basis and appropriate disclosures/consent for the End Customer data they process through OptiPay360.

2. Information We Collect

Information Merchants provide:

  • Business identity information (legal name, address, EIN/tax ID, business type)
  • Account holder and authorized user information (name, email, phone, login credentials)
  • Payment gateway and processing credentials and configuration
  • Banking/settlement details necessary for payment processing

End Customer information Merchants process through the Platform:

  • Customer name, email address, phone number, billing/shipping address
  • Transaction, invoice, estimate, and appointment details
  • Payment card data (handled per Section 5) and payment history
  • SMS/communication consent status

Information collected automatically:

  • Log data, device/browser information, IP address
  • Usage data and interactions with the Platform
  • Cookies and similar technologies (see Section 9)

3. How We Use Information

We use information to:

  • Provide, operate, maintain, and improve the Platform
  • Process payments, invoices, estimates, refunds, and settlements
  • Send transactional communications (receipts, invoice/payment notifications, appointment confirmations) by email and, where consent exists, SMS
  • Authenticate users and secure accounts
  • Detect, prevent, and address fraud, security issues, and prohibited activity
  • Provide support and respond to inquiries
  • Comply with legal, regulatory, tax, and card-network obligations

We do not sell personal information. We do not use End Customer data for our own marketing.

4. How We Share Information

We share information only as necessary to operate the Service:

  • Payment processors and gateways (e.g., NMI and associated processors) to process transactions
  • Communications providers (e.g., Twilio for SMS, email service providers) to deliver notifications
  • Infrastructure and service providers (hosting, database, security) under appropriate confidentiality and data-protection obligations
  • As required by law, legal process, or to protect rights, safety, and security
  • In connection with a business transfer (merger, acquisition, or sale of assets), subject to this Policy

Third parties acting as our service providers are authorized to use information only to perform services for us.

5. Payment Card Data & Security

Payment card data is handled in accordance with applicable Payment Card Industry Data Security Standard (PCI DSS) requirements. Sensitive cardholder data is processed through tokenization and secure, hosted payment fields provided by our payment gateway; we minimize our handling and storage of raw card data. We maintain administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. SMS / Text Messaging Data

Where SMS messaging is used, mobile phone numbers and messaging consent status are collected and processed solely to deliver transactional messages related to the recipient's transactions, invoices, estimates, receipts, and appointments. Consent is captured by the Merchant at the point of service. Mobile information is not shared with third parties for their marketing or promotional purposes. Message and data rates may apply. Recipients may opt out at any time by replying STOP. See our Messaging Terms for details.

7. Data Retention

We retain information for as long as necessary to provide the Service, comply with legal, tax, and card-network obligations, resolve disputes, and enforce agreements. Merchants are responsible for their own retention obligations regarding End Customer data.

8. Your Rights & Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the use of your personal information, or to data portability. Merchants may exercise these rights through their account or by contacting us. Requests concerning End Customer data should generally be directed to the relevant Merchant, as the controller of that data; we will assist Merchants in responding as required.

9. Cookies & Tracking

We use cookies and similar technologies to operate, secure, and improve the Platform. You can control cookies through your browser settings; disabling some cookies may affect functionality.

10. Children's Privacy

The Platform is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be indicated by updating the "Last Updated" date and, where appropriate, through additional notice. Continued use of the Platform after changes constitutes acceptance.

12. Contact Us

Optimum Payment Solutions — OptiPay360
Indianapolis, IN 46236
Email: support@optipay360.com

This document is provided as a general template and does not constitute legal advice. We recommend review by qualified legal counsel before reliance, particularly given payment processing and reseller activities.