Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Account Information: Name, business name, email, phone number, login credentials, billing address, and subscription details.

• Payment Information: Payment method details (collected and processed by third-party providers such as Stripe or PayPal; we do not store full card numbers).

• Customer Data: Information you upload or process about your customers, including names, emails, phone numbers, invoices, payment history, and review requests.

• Usage Data: IP address, browser type, device identifiers, operating system, login times, and feature usage.

• Communications: Records of your interactions with us, such as support inquiries, chat messages, and marketing preferences.

2. How We Use Your Information

We use collected information for purposes including:

• Delivering and improving the Service.

• Sending automated invoices, reminders, and review requests on your behalf.

• Processing payments and managing subscriptions.

• Detecting and preventing fraud or misuse.

• Communicating with you about updates, service issues, or promotions.

• Complying with applicable laws and enforcing our Terms & Conditions.

​

3. How We Share Information

We do not sell or rent personal data. We may share information only in the following cases:

• Service Providers: With third-party vendors (e.g., hosting, analytics, payment processors) strictly to provide the Service.

• Legal Compliance: When required by law, regulation, subpoena, or government request.

• Business Transfers: In the event of a merger, acquisition, financing, or sale of assets, your information may transfer as part of the transaction.

• With Your Consent: When you give explicit permission for us to share data.

4. Responsibility for Customer Data

• You retain full ownership of all data you upload about your customers.

• You represent and warrant that you have obtained all necessary rights, consents, and permissions to input, process, and use customer data within PayWaves.

• You are solely responsible for complying with marketing, privacy, and data-protection laws (including GDPR and CCPA where applicable) when you use PayWaves to communicate with your customers.

• We act only as a data processor of your customer data; you remain the data controller.

5. Data Security

We use industry-standard measures (encryption, firewalls, access controls) to protect your data. However, no system is entirely secure. We do not guarantee absolute security or immunity from breaches, and we disclaim liability for unauthorized access beyond our reasonable control.

6. Data Retention

• We retain your data as long as your account is active.

• Upon termination, we may retain limited information for legal, accounting, or regulatory obligations.

• You may request deletion of your data at any time by contacting us at [Insert Email].

7. Your Rights Under U.S. Law

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal data.

• Opt out of receiving marketing communications.

• Restrict or object to certain uses of your data.

• Request a copy (data portability).

We will honor requests as required by law.

8. Your Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect, use, and share.

• Request access to the specific data we have about you.

• Request deletion of your personal data, subject to exceptions (e.g., regulatory or legal obligations).

• Opt out of the “sale” or “sharing” of personal data (we do not sell personal data).

• Not be discriminated against for exercising your rights.

You may exercise these rights by contacting us at [Insert Email].

9. Your Rights Under the General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you may have the right to:

• Access your personal data.

• Request correction or deletion of your personal data.

• Restrict processing or object to certain processing activities.

• Withdraw consent where processing is based on consent.

• Data portability (receive your data in a structured, machine-readable format).

• Lodge a complaint with your local Data Protection Authority.

For GDPR purposes, Cavalier Capital Holdings LLC is the data controller for account and billing data, and a data processor for customer data you upload.

10. International Transfers

If you use PayWaves from outside the United States, your data may be transferred to and stored on servers in the U.S. or other jurisdictions. By using the Service, you consent to such transfers.

11. Children’s Privacy

PayWaves is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn we have inadvertently collected such data, we will delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Significant changes will be communicated via email or through the Service. Continued use of PayWaves after changes means you accept the updated policy.

13. Limitation of Liability

To the maximum extent permitted by law:

• We are not responsible for loss, misuse, unauthorized access, or disclosure of your data beyond our reasonable control.

• We disclaim liability for your misuse of customer data or violations of applicable law.

• Our total liability under this Privacy Policy will not exceed the total fees paid to us in the 12 months prior to the claim.

14. Contact Information

For privacy inquiries, requests, or complaints, contact:

Cavalier Capital Holdings LLC
Kings County, New York
Email: [[email protected]]