Privacy Policy

Go2PAY — Last updated September 16, 2026

Go2PAY is a payment platform that lets vendors accept card and cash payments, send invoices, manage customers, and withdraw earnings to their bank account. Your privacy matters to us. This policy explains what we collect, why we collect it, how we use it, and the choices you have.

Our commitments to you

• We won't sell or give away your email, phone number, address, or any other personal information to third parties for their marketing.
• We use industry-standard security measures (TLS in transit, encrypted storage at rest, password hashing) to protect your information from unauthorized access.
• Payment card data is processed by Stripe under PCI-DSS Level 1 certification. Go2PAY itself never sees full card numbers.

What information we collect

Account information

When you sign up as a vendor, we collect your name, email, phone number, business name (optional), and a password. If you add bank account or Zelle information for withdrawals, we store the account holder name, bank name, routing/account number (or Zelle phone), and address you provide.

Customer information you provide

When you create customers, send payment requests, or process orders, we store the customer's name, email, phone, and shipping/billing address (where you collect it). This information belongs to you and is scoped to your vendor account — other vendors cannot see your customer list.

Payment data

When a customer pays you, we store the order details (amount, product, date, status, refunds), the last 4 digits of the card, and a Stripe PaymentIntent ID. Full card numbers are never stored on our servers — they go directly to Stripe.

Mobile app data (Go2PAY mobile)

If you use the Go2PAY mobile app, we may also collect:

• Device push token — an anonymous Firebase Cloud Messaging identifier so we can send you notifications about new payment requests, sales, and refunds.
• Camera and photo library access — only used when you take or pick a product photo, or scan a redemption QR code. Images are uploaded to Go2PAY only when you explicitly attach them to a product.
• App diagnostics — non-personal crash and error logs to help us fix bugs.

Automatic information

Like most websites and apps, we automatically receive standard log information: IP address, browser/app version, operating system, and the pages or screens you visit. This helps us detect abuse and improve performance.

How we use your information

• To operate the service: process payments, send receipts, generate withdrawals, send notifications, and provide customer support.
• To secure your account: detect fraudulent logins, enforce multi-factor authentication, and respond to incidents.
• To improve Go2PAY: aggregate usage statistics, identify bugs, and prioritize new features.
• To comply with legal obligations: tax reporting, anti-money-laundering checks, and lawful requests from authorities.
• To communicate with you about updates to the service, new features, and important policy changes. You can opt out of marketing communications at any time.

How we share your information

We share your information only in these limited cases:

• Stripe — our payment processor. Card payments, refunds, and withdrawal payouts flow through Stripe under their privacy policy.
• Firebase / Google Cloud Messaging — for delivering mobile push notifications to your device.
• Service providers we hire for specific tasks (email delivery, hosting, error monitoring). These providers are bound by confidentiality obligations and may only use the data to provide their service.
• Legal compliance — if we are required by law, court order, or regulator. We will tell you about such requests unless legally prohibited.
• Business transfer — if Go2PAY is acquired or merges with another company, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Your choices and access rights

• You can review and update your profile information at any time from the Profile page in the app or website.
• You can delete customers (where they have no orders) and payment requests (where they have not been paid).
• You can request a full export of your data, or deletion of your account, by emailing go2pay@go2fete.com with the subject "Data Request". We will respond within 30 days.
• You can opt out of marketing messages by replying with "unsubscribe" or via the link at the bottom of any marketing email.

Data retention

We retain your account, transaction, and tax-relevant data for as long as your account is active and for up to 7 years afterwards to comply with financial record-keeping requirements. Backup copies may persist for a short period after deletion before being overwritten in the normal course of backup rotation.

Security

We take strong precautions to protect your data from loss, misuse, unauthorized access, alteration, or destruction:

• All web and API traffic is encrypted in transit using TLS.
• Passwords are hashed (never stored in plain text).
• API access uses JWT tokens with short access-token lifetimes and refresh-token rotation.
• Production servers are access-controlled and audit-logged.
• Card data is never stored on our servers — only by Stripe.

You also have a role in protecting your information. Use a strong, unique password, enable multi-factor authentication where available, and don't share your login credentials with anyone.

Children's privacy

Go2PAY is a business-to-business product intended for vendors operating legitimate businesses. It is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at go2pay@go2fete.com and we will delete it.

International use

Go2PAY is operated from Grenada. By using Go2PAY you consent to your information being transferred to and processed in Grenada and in any country where our service providers operate, subject to the protections described in this policy.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will also be communicated by email or via a notice in the app. Your continued use of Go2PAY after a change takes effect indicates your acceptance of the updated policy.

Contact us

If you have questions, concerns, or requests about this Privacy Policy or how we handle your data, contact us at: