Your portfolio stays yours

Effective October 9, 2026

Portfolio Manager was built by people who work in payments, so we built it around the thing reps care about most: your book of business belongs to you. Here is exactly how we handle it.

We never contact your merchants

We will never contact, solicit or board a merchant in your workspace, and we don't use anything in your workspace to prospect, price or compete for business.

You own every record

Everything you enter or import is yours. The workspace owner can export all of it at any time from Settings → Data & privacy, in one Excel workbook, even while the workspace is read-only.

Delete whenever you want

The workspace owner can delete the workspace from Settings → Data & privacy. Billing stops right away, and 30 days later every merchant, residual, partner, task, uploaded file and stored integration key is permanently erased. You can cancel until then. If your subscription ends instead, the workspace stays read-only for 90 days so you can export, then it's erased, and we email the owner at least 14 days before. We keep only a record that the account existed and what it paid us, for tax purposes.

Our team doesn't access workspace contents

Our staff tools show your plan, billing, team members and record counts. They don't show your merchants, residuals, rates or partners. If you want hands-on help, you invite us as a user with the role you choose and remove us when you're done. Anything done under that login is tagged "SPS" in your access log. Beyond that, we only touch workspace data when it's needed to keep the service running or to investigate a security problem.

The same goes for an NMI gateway request you send us: we read what you submit so we can board the account, and each time we view a bank number, EIN or SSN on it, it appears in your access log.

Sensitive values are encrypted and logged

Card numbers never enter our database; card and bank payments run through NMI's and Square's PCI-certified vaults. SSNs, tax IDs, dates of birth, license numbers and bank numbers are encrypted one field at a time before they're stored, so the database and its backups hold only encrypted text. Each value is shown only to owners, admins and managers, one at a time, and every view or change is recorded in your workspace's access log.

On NMI gateway requests, the full bank numbers, EIN, owner SSNs and supporting documents are erased 30 days after the account goes live or the request closes.

Every workspace is walled off

Each workspace is separated at the database level and checked again by the application on every request. Sub-agents see only the merchants assigned to them. Other customers, uplines and sub-agents see nothing you haven't given them.

Built on audited infrastructure

Data is encrypted in transit and at rest with our infrastructure providers, which are independently audited (SOC 2 Type II). Two-factor sign-in is available on every account, and workspace owners can require it.

Never sold, shared or used to train AI

We don't sell or share your data, and we don't use it to train AI models. See the Privacy Policy for the service providers we use and why.