Products 
OUT PRODUCTS
Advanced Dashboard
Embedded Checkout
Smart Transaction Routing
Smart Reconciliation
Churn Reduction
Subscription Management
Reporting & Analytics
Pricing
Connections 
CONNECTIONS
Payment Providers
Payment Methods
Resources 
RESOURCES
Blog
Cases Study
SOON
About Us 
ABOUT US
Careers & Culture
Contact Us
Careers
English
Log in
Start for Free
EN
Privacy policy
Terms of Use
Privacy policy
Welcome to Payinsider.
Payinsider Limited (“Payinsider”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when:
- you visit our website;
- you access or use our payment orchestration platform and related services;
- you interact with our products, APIs, documentation, support services, or other business communications.
This Privacy Policy also explains your rights regarding your personal data and how applicable privacy laws protect you.
Please read this Privacy Policy carefully.
1. Introduction
Payinsider provides payment technology solutions that enable merchants to manage and optimize payment processing through our platform.
Our services may include:
- payment orchestration;
- payment method integration;
- payment credential tokenization;
- payment routing and transaction optimization;
- recurring payment management;
- transaction monitoring;
- payment analytics;
- fraud prevention and risk management capabilities.
Payinsider is a technology service provider. We do not act as a bank, card issuer, acquiring institution, payment network, or merchant of record.
The processing of payment transactions may involve merchants, payment service providers, acquiring banks, card networks, fraud prevention providers, and other third-party service providers.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal information collected through:
2.1 Website
Including:
- Payinsider website;
- online documentation;
- marketing pages;
- contact forms;
- customer portals.
2.2 Platform Services
Including information processed when merchants use Payinsider services, such as:
- payment orchestration APIs;
- payment routing services;
- tokenization services;
- subscription payment services;
- transaction management tools.
2.3 Business Communications
Including:
- emails;
- customer support communications;
- sales communications;
- account management interactions.
3. Who We Are
The entity responsible for processing personal information under this Privacy Policy is:
Payinsider Limited
Room 602, 6/F, Kai Yue Commercial Building,
No. 2c, Argyle Street,
Mongkok, Kowloon, Hong Kong
Email:
info@pay-insider.com
We have appointed a data privacy manager responsible for overseeing privacy-related matters and responding to requests regarding personal information.
4. Definitions
For purposes of this Privacy Policy:
“Personal Data”
Means any information relating to an identified or identifiable individual.
“Payment Data”
Means information related to payment transactions, including:
- transaction identifiers;
- payment method information;
- payment status;
- transaction amount;
- currency;
- payment provider information;
- payment authorization results.
“Card Data”
Means payment card information including:
- Primary Account Number (PAN);
- cardholder name;
- expiration date;
- payment token.
“Sensitive Authentication Data”
Means authentication information defined under applicable payment security standards, including:
- CVV;
- CVC;
- CID;
- PIN data;
- authentication values.
5. Data Controller and Processor Roles
Depending on the nature of the service and applicable law, Payinsider may act as:
5.1 Data Processor / Service Provider
When providing payment technology services to merchants, Payinsider generally processes payment-related information on behalf of merchants.
In such cases:
- the merchant determines the purposes of processing;
- Payinsider processes information according to merchant instructions and contractual requirements.
5.2 Independent Controller
Payinsider may act as an independent controller for certain information, including:
- account registration information;
- business contact information;
- website usage information;
- security monitoring information;
- support communications.
6. Information We Collect
We may collect the following categories of information.
6.1 Merchant Information
When merchants register or use our services, we may collect:
- company name;
- business registration information;
- contact information;
- account administrator details;
- billing information;
- service configuration information.
6.2 End Customer Information
When merchants use our checkout or payment services, we may process information relating to their customers, including:
- name;
- email address;
- billing address;
- shipping address;
- transaction reference information;
- payment status information.
6.3 Payment Information
To enable payment processing, we may process:
- payment method type;
- card brand;
- payment token;
- encrypted payment credentials;
- transaction information;
- payment authorization information.
Where applicable, payment credentials may be tokenized before storage or further processing.
6.4 Card Data Protection
Payinsider implements security controls designed to protect card information processed through our platform.
We:
- protect card data using appropriate technical safeguards;
- restrict access based on business requirements;
- use encryption and secure transmission mechanisms.
Payinsider does not store Sensitive Authentication Data, including CVV/CVC values, after authorization.
6.5 Technical Information
We may collect:
- IP address;
- browser type;
- operating system;
- device information;
- access logs;
- API request logs;
- security monitoring information.
6.6 Transaction Information
We may process:
- transaction amount;
- currency;
- merchant reference number;
- payment provider response;
- authorization result;
- settlement information;
- refund information;
- chargeback information.
7. How We Collect Information
We collect personal information through various methods depending on how you interact with Payinsider.
7.1 Information Provided Directly by You
We may collect information when you:
- create a Payinsider account;
- register for our services;
- configure payment settings;
- communicate with our sales or support teams;
- submit technical requests;
- participate in surveys or provide feedback;
- enter into agreements with Payinsider.
The information provided may include:
- identity information;
- business information;
- contact information;
- account information;
- payment-related configuration information.
7.2 Information Collected Through Merchant Integrations
When merchants integrate their systems with Payinsider, we may receive information through:
- APIs;
- SDKs;
- hosted checkout pages;
- payment integrations;
- webhooks;
- transaction processing requests.
Such information may include:
- transaction details;
- payment status;
- payment method information;
- customer-provided payment information;
- fraud-related signals.
The merchant is responsible for ensuring that it has obtained all necessary rights, permissions, and consents before providing personal information to Payinsider.
7.3 Automatically Collected Information
When you access our website or platform, we may automatically collect technical information through:
- cookies;
- log files;
- analytics technologies;
- monitoring tools.
This information may include:
- IP address;
- browser type;
- device information;
- operating system;
- access time;
- pages visited;
- API activity logs.
We use this information to:
- maintain platform availability;
- improve performance;
- detect security issues;
- prevent misuse;
- analyze service usage.
7.4 Information Received From Third Parties
We may receive information from third parties, including:
Payment Service Providers
Such as:
- payment gateways;
- acquiring institutions;
- alternative payment method providers.
Information received may include:
- transaction status;
- authorization results;
- payment method information.
Fraud Prevention Providers
We may receive:
- risk scores;
- fraud indicators;
- device intelligence information;
- identity verification results.
Business Partners
We may receive business contact information from:
- partners;
- service providers;
- publicly available sources.
8. How We Use Personal Data
We may use personal information for the following purposes.
8.1 Providing Payment Services
We process information to:
- enable merchants to accept payments;
- connect merchants with payment providers;
- process payment requests;
- manage payment transactions;
- provide transaction status information.
8.2 Payment Routing and Optimization
As a payment orchestration platform, we may process transaction information to support:
- payment routing decisions;
- payment provider selection;
- transaction retry mechanisms;
- payment performance optimization.
Routing decisions may be based on:
- merchant configuration;
- payment provider availability;
- transaction characteristics;
- operational requirements.
Payinsider does not guarantee successful authorization of any transaction.
8.3 Tokenization and Payment Credential Management
We may process payment credentials for the purpose of:
- token generation;
- secure payment credential storage;
- recurring payment processing;
- merchant-initiated transactions.
Where tokenization is used:
- original card credentials may be replaced with tokens;
- tokens may be used instead of raw payment information for future transactions.
Tokens cannot be used as substitutes for original payment credentials outside authorized payment processing environments.
8.4 Recurring Payment and Subscription Management
Where supported by merchants, we may process information to enable:
- recurring payments;
- subscription billing;
- payment retries;
- account updater services.
8.5 Fraud Detection and Risk Management
We may process transaction and technical information to:
- identify suspicious activities;
- support fraud prevention;
- apply merchant-configured risk rules;
- improve transaction security.
Our fraud prevention tools provide risk evaluation and control capabilities.
However, Payinsider does not guarantee that fraudulent transactions, unauthorized payments, chargebacks, or payment disputes will be prevented.
8.6 Customer Support
We may use information to:
- respond to inquiries;
- troubleshoot technical issues;
- provide account assistance;
- improve customer experience.
8.7 Security and Compliance
We may use information to:
- maintain system security;
- monitor suspicious activities;
- investigate security incidents;
- comply with legal obligations;
- enforce contractual requirements.
8.8 Analytics and Service Improvement
We may use aggregated or anonymized information to:
- analyze platform performance;
- improve products;
- develop new features;
- optimize payment processing capabilities.
Aggregated information that cannot reasonably identify individuals is not considered personal data under applicable laws.
9. Payment Data Processing
9.1 Payment Data Flow
When a customer completes a payment through a merchant using Payinsider, payment information may flow through:
Customer
↓
Merchant Checkout
↓
Payinsider Platform
↓
Payment Service Provider / Acquirer
↓
Card Network / Alternative Payment Network
Payinsider facilitates communication between merchants and payment providers.
Payinsider does not:
- issue payment cards;
- operate card networks;
- provide banking services;
- hold merchant funds.
9.2 PCI DSS Compliance
Payinsider maintains security practices designed to support compliance with applicable payment security requirements, including PCI DSS where applicable.
Our security practices may include:
- encryption;
- access controls;
- network protection;
- monitoring;
- vulnerability management;
- security testing.
9.3 Shared PCI Responsibility
Payment security responsibilities are shared among participants.
Depending on implementation:
Payinsider Responsibility
Payinsider is responsible for protecting payment information processed within our platform environment.
Merchant Responsibility
Merchants remain responsible for:
- securing their own systems;
- protecting customer information collected outside Payinsider;
- complying with applicable PCI DSS obligations;
- ensuring approved payment integrations are used.
Payment Provider Responsibility
Payment service providers and acquiring institutions remain responsible for their own processing environments.
9.4 Sensitive Authentication Data
Payinsider does not store Sensitive Authentication Data after authorization.
This includes:
- CVV;
- CVC;
- CID;
- PIN data.
Merchants must not transmit prohibited sensitive authentication data to Payinsider except where explicitly supported and permitted.
10. Sharing Personal Data
We may disclose personal information to the following categories of recipients.
10.1 Payment Service Providers
To enable transaction processing, we may share relevant information with:
- payment gateways;
- acquiring banks;
- alternative payment providers.
10.2 Fraud Prevention Providers
We may share information with fraud and security providers to support:
- fraud detection;
- transaction risk analysis;
- identity verification.
10.3 Infrastructure Providers
We may use third-party infrastructure providers for:
- cloud hosting;
- database services;
- monitoring;
- security services.
These providers process information only to support Payinsider services.
10.4 Legal and Regulatory Authorities
We may disclose information where required by:
- applicable law;
- court orders;
- regulatory requirements;
- law enforcement requests.
11. International Data Transfers
Because Payinsider operates internationally, personal information may be processed in countries outside your location.
Where required by applicable law, we implement appropriate safeguards for international transfers, including:
- contractual protections;
- security controls;
- approved transfer mechanisms.
12. Security Measures
Payinsider uses reasonable administrative, technical, and organizational measures designed to protect personal information.
These measures may include:
12.1 Encryption
We use encryption technologies designed to protect information during:
- transmission;
- storage;
- system communication.
12.2 Access Control
We implement controls including:
- role-based access;
- authentication requirements;
- restricted administrative access.
12.3 Monitoring and Logging
We maintain security monitoring processes including:
- system logs;
- access monitoring;
- security alerts;
- incident investigation procedures.
12.4 Security Incident Response
If we become aware of a security incident involving personal information, we will:
- investigate the incident;
- take appropriate corrective actions;
- notify affected parties where required by applicable law.
13. Data Retention
We retain personal information only for as long as necessary for:
- providing services;
- complying with legal obligations;
- resolving disputes;
- enforcing agreements;
- maintaining security records.
Retention periods may vary depending on:
- regulatory requirements;
- contractual obligations;
- business requirements.
When information is no longer required, we will securely delete or anonymize it.
14. Cookies
Our website may use cookies and similar technologies.
Cookies may be used for:
- website functionality;
- authentication;
- analytics;
- security;
- service improvement.
You may control cookies through your browser settings.
Disabling cookies may affect certain website functionality.
15. Data Subject Rights
Depending on applicable laws, individuals may have rights including:
- access to personal information;
- correction of inaccurate information;
- deletion requests;
- restriction of processing;
- objection to processing;
- data portability;
- withdrawal of consent.
Requests may be submitted through:
Email:
info@pay-insider.com
We may verify your identity before processing requests.
16. Children's Privacy
Our services are intended for businesses and individuals who are legally able to enter into agreements.
We do not knowingly collect personal information from children.
If we become aware that we have collected information from a child without appropriate authorization, we will take reasonable steps to delete such information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When changes are made:
- the updated version will be published on our website;
- the effective date will be updated;
- additional notice may be provided where required.
Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.
18. Contact Information
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us:
Payinsider Limited
Room 602, 6/F,
Kai Yue Commercial Building,
No. 2c, Argyle Street,
Mongkok, Kowloon, Hong Kong
Email:
info@pay-insider.com
Ask Anne