Privacy Policy

Effective September 24, 2026

This Privacy Policy explains how Sanders Payments Inc., doing business as Strategic Payment Solutions (“SPS,” “we,” “us”) handles information in connection with SPS Portfolio Manager (the “Service”). It applies alongside our Terms of Service.

1. Two kinds of information

Customer Data is information our business customers and their users put into the Service — for example, merchant records, contacts, residual reports, and documents. We process Customer Data on behalf of, and under the instructions of, the customer that controls the workspace. That customer decides what is collected and is responsible for having the right to share it with us. If you are a merchant or contact whose information appears in a customer’s workspace, please direct privacy requests to that customer; we will assist them as required by law.

Account and usage information is information about the people who use the Service, which we handle as described below.

2. What we collect

Account information: name, email address, phone number, business name, role, and login credentials (passwords are stored only in hashed form by our authentication provider).
Billing information: plan, billing history, and payment method details handled by our payment providers. We do not store full card or bank account numbers; our providers store them and give us a reference token.
Usage and device information: log data such as IP address, browser type, pages used, actions taken (including an activity log within each workspace), and timestamps, used for security, troubleshooting, and improving the Service.
Records of your agreement: which version of our Terms and this Policy you accepted, when, and from which IP address and browser.
Communications: messages you send us and emails we send you, including delivery status.

3. How we use information

to provide, maintain, secure, and support the Service;
to process payments and send account, billing, security, and service notices;
to detect, investigate, and prevent fraud, abuse, and security incidents;
to understand usage and improve the Service; and
to comply with law and enforce our Terms.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use Customer Data to train AI models.

4. Service providers we use

We share information with service providers only as needed for them to perform services for us, under obligations to protect it. They currently include:

Supabase — database, file storage, and authentication;
Vercel — application hosting;
Resend — email delivery;
NMI and Square — subscription payment processing;
Anthropic — AI processing for import assistance (limited file samples, such as column names and a few rows, are sent when a file format is not recognized); and
integrations a customer chooses to connect, such as HubSpot or a payment gateway, which receive and send data at that customer’s direction.

We may also disclose information if required by law or legal process, to protect the rights, safety, or property of SPS, our customers, or others, or in connection with a merger, acquisition, or sale of assets (subject to this Policy).

5. Security

We use commercially reasonable safeguards, including encryption in transit, encrypted storage at our infrastructure providers, role-based access controls, workspace-level data separation enforced in the database, and activity logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affects your information, we will notify you as required by law.

6. Retention

We keep Customer Data while the customer’s workspace is active and for up to 30 days after cancellation or termination, after which we delete it unless the law requires us to keep it. We keep account, billing, and agreement records as long as needed for the purposes above, including legal, tax, and accounting requirements. Backups are overwritten on a rolling basis.

7. Your choices and rights

You can update account information in the Service and unsubscribe from optional emails. Depending on where you live — including California — you may have rights to request access to, correction of, or deletion of personal information we hold about you, and to not be discriminated against for exercising those rights. To make a request, email support@strategicpaysolutions.com. We will verify your request before acting on it. For Customer Data, we will refer your request to, or act at the direction of, the customer that controls it.

8. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

9. Changes

We may update this Policy. For material changes, we will notify you through the Service or by email and may ask you to accept the updated Policy.

Contact

Sanders Payments Inc., doing business as Strategic Payment Solutions
support@strategicpaysolutions.com