ZewstPay

Last updated: June 20, 2026

Privacy Policy

Zewst, Inc. (“Zewst,” “we,” “us”) operates ZewstPay, a payments service available to merchants and their customers in the United States and Canada. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

We collect information in three categories: information you provide directly, information from your use of the service, and information we receive from our payment processors and partners.

  • Account information. Business name, business address, legal entity details, beneficial owner information, EIN or business number, contact name, email, phone — the standard KYB (know-your-business) data required to onboard a payments account.
  • Transaction data. Amounts, currencies, timestamps, payment method metadata (card brand, last 4, country of issue), customer references you supply, and dispute / refund history. We do not store full card numbers; tokenization is performed by our processor.
  • Device and usage data. IP address, browser type, referring URLs, the actions you take in our dashboards. Used for security, fraud prevention, and product analytics.
  • Identity verification. Government-issued ID, beneficial owner information, and other documentation collected during KYB and ongoing risk review.

2. How we use information

  • To provide and improve the ZewstPay service.
  • To comply with U.S. and Canadian financial regulations including AML, OFAC sanctions screening, FinCEN (US), and FINTRAC (Canada) reporting obligations.
  • To detect and prevent fraud, chargebacks, and money laundering.
  • To send service announcements, security alerts, and receipts.
  • To respond to legal process, subpoenas, and lawful requests.

3. How we share information

We share information only with:

  • Our payment processor (Finix Payments) to settle your transactions and meet card-network requirements.
  • Service providers (cloud hosting, email delivery, observability) bound by data processing agreements.
  • Card networks and regulators as required by law or network rules.
  • Successors in the event of a merger, acquisition, or business transfer.

We do not sell personal information.

4. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information. California residents have specific rights under CCPA/CPRA. Canadian residents have rights under PIPEDA and provincial privacy laws (Québec Law 25, BC PIPA, Alberta PIPA). To exercise these rights, email privacy@zewstpay.com. Note that some retention periods are mandated by financial regulations and override deletion requests.

5. Data retention

Transaction records and KYB documentation are retained for the period required by U.S. and Canadian financial regulations (typically five to seven years from the closure of your account). Operational data (logs, sessions) is retained for shorter periods commensurate with security needs.

6. Data security

We use TLS in transit, encryption at rest, role-based access controls, and audit logging. We are not the merchant of record for card data — full PANs flow through our PCI-DSS-compliant processor and never reach our servers. No system is perfectly secure; you are responsible for protecting your account credentials.

7. International transfers

ZewstPay is operated from the United States. If you are located in Canada, your information is transferred to and processed in the United States in accordance with applicable cross-border data transfer rules.

8. Cookies

We use cookies and similar technologies — see our Cookie Policy.

9. Children

ZewstPay is a business-facing service. We do not knowingly collect information from children under 13 (or 18 in some jurisdictions).

10. Changes

We may update this policy from time to time. Material changes will be notified via email or in-product banner with at least 30 days' notice where required by law.

11. Contact

Privacy questions: privacy@zewstpay.com
Postal: Zewst, Inc., United States.

This document is a plain-language draft and not legal advice. Before operating commercially, have qualified counsel review and tailor it to your specific operations.