Privacy Notice

This notice explains what personal information DarSeek Technologies LLC ("DarSeek", "we", "us") collects, why, who receives it, how long we keep it and the choices people have. It covers the businesses that use DarSeek, the people on their teams, and the customers those businesses send payment requests to. DarSeek is offered only in the United States.

1. Two roles

For information about businesses and their team members, we decide how it is used. For information about a business's customers, the business decides why it is collected and what is sent; we handle it on the business's behalf to provide the service, and the business is responsible for having the right to give it to us. Questions about a payment or the work go to the business; its details are on every payment page.

2. What we collect about businesses and teams

• Account details: names, email addresses, phone numbers, passwords (stored only as a one-way hash, never readable), business name, type of work, address, website and logo.
• Payment account details: Stripe collects identity, tax and bank information directly to open your payment account. We receive the status of your account, what Stripe still needs, and the business details Stripe verifies (such as legal name, address, phone, website and industry). We do not receive your identity documents or full bank account numbers.
• Plan billing: Stripe holds the card or wallet you pay your plan with. We see only its type and last four digits.
• Activity: the requests you create, amounts and descriptions, spreadsheet uploads, messages sent, sign-ins, and the IP address and browser used.
• Agreements: which version of each agreement was accepted, when, and from which IP address and browser.
• What you send us: support requests and feedback.

3. What we collect about customers

• From the business: the customer's name, mobile phone number, email address if given, and what the payment is for.
• When the customer opens a payment link: the time, IP address and browser.
• When the customer pays: the payment method type, card brand and last four digits, wallet type, amount, time, the exact authorization they agreed to, the IP address and browser, and the billing details Stripe returns. Full card and bank account numbers are entered directly with Stripe and never reach our systems.
• Replies to our texts, such as STOP and HELP.

4. How we use it

To provide the service: create and send payment requests, reminders and receipts; take payments through Stripe; show businesses their records; and provide support. To keep it safe: verify sign-ins, prevent fraud, abuse and spam, and secure accounts. To meet legal duties: tax, card network, bank-transfer and telecommunications rules, and lawful requests from authorities. To improve it: using combined, de-identified statistics that do not identify any business or person. To tell businesses about their account and the service; businesses can opt out of product news, but not of account and security messages.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use customers' information to market to them, and we never use a customer's information for any business other than the one that sent the request.

5. Text messages and mobile numbers

Mobile numbers are used only to send the messages a business asked us to send, account messages to businesses, and opt-out confirmations. Mobile numbers and text message consent are never sold, rented or shared with anyone for their own marketing. Reply STOP to any text to stop texts; reply HELP for help.

6. Who receives it

Each business's information is kept separate from every other business's by the design of our systems.

• The business that sent the request. Team members see only the requests they created, unless they are the account owner.
• Stripe, which processes payments and opens payment accounts. When personal information is provided in connection with DarSeek, Stripe receives it and processes it under the Stripe Privacy Policy (https://stripe.com/privacy).
• Service providers who run parts of the service for us, such as hosting, email and text message delivery. They may use it only to provide those services to us.
• Mobile carriers and email providers, to deliver messages.
• Authorities, courts and others, when the law requires it, or when needed to protect people, prevent fraud or enforce our agreements.
• A buyer or successor, if DarSeek is sold or merged, under this notice.
• Anyone else, only with permission.

7. Cookies and tracking

We use cookies only to keep people signed in and to secure the service. We do not use advertising cookies, and we do not use third-party analytics or tracking on our website. On payment pages, Stripe's payment form may set its own cookies to prevent fraud, under the Stripe Privacy Policy. Because we do not track people across other websites, we do not respond differently to browser "Do Not Track" signals.

8. How long we keep it

Payment, authorization, consent, dispute and tax records: at least seven years, because tax, card network and bank-transfer rules require them. Sign-in and security logs: one year. Other account information: while the account is open and for up to three years after it closes, to answer disputes and questions. When information is no longer needed, we de-identify it so it no longer identifies anyone. We keep records needed for legal duties even when asked to delete them, and we tell the person when that applies.

9. Your choices and rights

Businesses can see and edit their details, change passwords, remove team members and close their account in the app. Anyone can ask us for a copy of their personal information, or to correct or delete it, by emailing the support address. Customers' requests about a business's records may be passed to that business, which decides on them as the party responsible for its customers' information.

Depending on the state you live in, such as California, Colorado, Connecticut, Virginia and others with privacy laws, you may have rights to know what we collect and how we use it, to get a copy, to correct it, to delete it, and to opt out of sale, targeted advertising and certain profiling. We do not sell personal information or use it for targeted advertising or profiling. We will verify your request by confirming details we already hold, you may use an authorized agent, and we will not treat you differently for using your rights. If we decline a request, you may appeal by replying to our answer, and we will respond within the time the law requires.

10. Security

Information is encrypted in transit and at rest. Passwords are stored only as one-way hashes. Sign-ins use a password and can require a code sent by email. Each business's records are separated at the database level, and staff access is limited and recorded. No system is perfectly secure. If we learn of a breach that affects your personal information, we will tell you as the law requires.

11. Children

DarSeek is for businesses and is not meant for anyone under 18. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

12. Changes to this notice

We may update this notice. For a material change, we will give businesses at least 30 days' notice by email and in the app before it takes effect. We will not use personal information already collected in a materially different way without the consent the law requires.

13. Contact

DarSeek Technologies LLC, 2222 W Grand River Ave Ste A, Okemos, MI 48864. Email support@darseek.com.