Privacy Policy

Last Revised: March 5, 2021

This Privacy Policy describes how Safrapay Inc. and our U.S. affiliates (collectively, “we,” “us,” or “our”) collect, use, share, and safeguard personal information.  When we receive information for our own purposes, the processing of that information is described by this Privacy Policy. When we receive information on behalf of Safra National Bank of New York (“SNBNY”), the processing of that information is described by the Safra Digital Bank Privacy Policy which is available on its website.

You can jump to particular topics by going to the headings below:

• Types of Information We Collect
Use and Processing of Information
Sharing of Information
Your Choices
Authorized Agent
• How We Protect Personal Information
Other Important Information
Contact Information
Authorized Agent Designation Form

Types of Information We Collect

We are a third party service provider of payment processing and digital banking solutions to SNBNY or other financial institutions in the United States.  We receive personal information from customers and potential customers (collectively “Customers”) for our own use in providing those services. We also receive personal information and process that information as a third party service provider for SNBNY or other financial institutions.

The following provides examples of the type of information that we collect from you and how we use that information.

 

ContextTypes of DataPrimary Purpose for Collection and Use of Data
Contact InformationWe collect the name and contact information of Customers and their owners, employees and related parties with whom we interact.We use this information to contact Customers and communicate with them concerning normal businessadministration related to our services.
Account Registration (if applicable)We collect your name and contact information if you create an account on one ofour portals or apps. We also collect information relating to the actions that you perform while logged into your account.We use this information to provide account related functionalities to our users. Accounts can be used to save your preferences and transaction history.
Customer Information We may collect some or all of the following information from Customers, their owners and related third parties who open accounts: the name, phone number, postal address, email address, driver’s license number, date of birth, Social Security Number, and bank account information.We collect this information from Customers in order to accurately provide them with financial products and services, and to conduct AML and fraud monitoring.
Cookies and first party trackingWe may use cookies and clear GIFs. “Cookies” are small pieces of information that a website sends to a computer’s hard drive while a web site is viewed, and clear GIFs are a type of picture file that can be used to store or send data. We use this information to ensure our website operates efficiently.
Cookies and Third Party TrackingWe may participate in behavior-based advertising, this means that a third party uses technology (e.g., a cookie) to collect information about your use of our website so that they can provide advertising about products and services tailored to your interests on our website, or on other websites. We use this information to engage in behavior-based advertising and capture website analytics.
Demographic InformationWe may collect personal information, such as your age or location. We use this information to comply with applicable laws.
Distance InformationWhen you use one of our Apps we collect your location from the GPS, Wi-Fi, and/or cellular technology in your device to determine your location. We use this information to detect and prevent fraud.
Email InterconnectivityIf you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains.We use this information to understand how you interact with our communications to you.
EmploymentIf you apply for a job posting, or become an employee, we collect information necessary to process your application or to retain you as an employee. This may include, among other things, your Social Security Number. Providing this information is required for employment.We use information about current employees to perform our contract of employment, or the anticipation of a contract of employment with you. In some contexts, we are also required by law to collect information about our employees. We also use this information to have efficient staffing and work force operations.
Feedback/SupportIf you provide us feedback or contact us for support we will collect your name and e-mail address, as well as any other content that you send to us, in order to reply.We use this information in order to receive, and act upon, your feedback or issues.
Mailing ListWhen you sign up for one of our mailing lists we collect your email address or postal address. We share information about our products and services with individuals that consent to receive such information. We also use this information to share information about our products or services.
Mobile DevicesWe may collect information from your mobile device such as unique identifying information broadcast from your device when using our apps or visiting our website.We have a legitimate interest in identifying unique visitors, and in understanding how users interact with us on their mobile devices. We also have a legitimate interest in detecting and preventing fraud.
Partner PromotionWe may collect information that you provide as part of a co-branded promotion with another company.We use this information to fulfil our promotions.
SurveysWe may ask you to participate in a survey regarding the services we provide you. When you participate in a survey, we collect information that you provide through the survey. If the survey is provided by a third-party service provider, the third party’s privacy policy applies to the collection, use, and disclosure of your information.We use this information to understand your opinions and collect information relevant to our organization.
Sweepstakes or contestsWhen you participate in a sweepstakes or contest we collect information about you which includes contact information to notify you if you are selected.We use this information to operate the sweepstakes. In some contexts we are also required by law to collect information about those that enter into our sweepstakes.
Website interactionsWe use technology to monitor how you interact with our website. This may include which links you click on, or information that you type into our online forms. This may also include information about your device or browser.We use this information to understand how you interact with our website to better improve it, and to understand your preferences and interests in order to select offerings that you might find most useful. We also have a legitimate interest in detecting and preventing fraud.
Web logsWe may collect information, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used), domain name, click-activity, referring website, and/or a date/time stamp for visitors.We use this information to monitor our networks and the visitors to our websites. Among other things, it helps us understand which of our products or services is the most popular. We may also use this information to prevent fraud.

 

In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources. For example, if you submit a Customer application, we will conduct background checks, AML checks and other financial checks to assist in our underwriting.

Use and Processing of Information

In addition to the purposes/ uses described above, we use information in the following ways:

  • To identify you when you visit our websites or mobile apps.
  • To provide financial products and services.
  • To improve our services and product offerings.
  • To conduct analytics.
  • To respond to inquiries related to support, employment opportunities, or other requests.
  • To send marketing and promotional materials, including information relating to our products, services, sales, or promotions.
  • For internal administrative purposes, as well as to manage our relationships.

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose.  For example, if you conduct a financial transaction through our services we may collect your information to perform our contract with you, but we also collect your information as we have a legitimate interest in maintaining your information after your transaction is complete so that we can quickly and easily respond to any questions about your transaction.  As a result, our collection and processing of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our general interest in conducting our business.

Sharing of Information

In addition to the specific situations discussed elsewhere in this policy, we disclose information in the following situations:

  1. Affiliates and Acquisitions. We may share information with our corporate affiliates (g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage. 
  2. Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
  3. Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third party intermediary.
  4. Partner Promotion. We may offer contests, sweepstakes, or other promotions with third party partners. If you decide to enter a contest, sweepstakes, or promotion that is sponsored by a third party partner, the information that you provide will be shared with us and with them.  Their use of your information is governed by their privacy policy.
  5. Service Providers. We may share your information with service providers. Among other things service providers may help us to administer our website, conduct surveys, provide technical support, provide fraud/AML monitoring, assist with underwriting, and process
  6. Sharing with Affiliates and Non-Affiliates for Marketing and Other Purposes. We may share your information with affiliates and non-affiliates for marketing and other purposes. Under certain circumstances, you may opt-out of such sharing with respect to certain data you have provided to us. In addition, you may opt-out of the sharing of certain information with our affiliates by using one of the methods listed below under “Contact Information.”

Your Choices

You may be able to make the following choices regarding your personal information:

  1. Access To Your Personal Information. You may request access to your personal information by contacting us at the address described below. If required by law, upon request, we will grant you reasonable access to the personal information that we have about you. You may also be entitled to ask us for a notice describing what categories of personal information (if any) we share with third parties or affiliates for direct marketing. 
  2. Deletion Of Your Personal Information. You may request that we delete your personal information by contacting us at the address described below.  If required by law, we will grant a request to delete information.  If we are processing your information on behalf of a third party, we will forward your request and await instructions from them on whether your information should be deleted. You should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes. 
  3. Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include “Do Not Track” instructions.
  4. Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive.  If you decide not to receive promotional emails, we may still send you service-related communications.
  5. Promotional Mailings. If at any time you do not want to receive offers and/or circulars from us you can remove yourself from our mailing lists by emailing us (our contact information is below) with “NO SNAIL MAIL” in the subject line along with your name, address and zip code. Please note that our mailings are prepared in advance of their being sent. Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.
  6. Promotional Text Messages. If you receive a text message from us that contains promotional information you can opt-out of receiving future text messages by replying “STOP.”


Please address written requests and questions about your rights to PRIVACY@safrapay.com or call us at 1-877-472-3727.

Note that, as required by law, we will require you to prove your identity.  We may conduct an identity verification by phone call or email. Depending on your request, we will ask for information to verify your identity. We may also ask you to provide a signed declaration confirming your identity. Following a request, and to the extent required by law, we will use reasonable efforts to supply, correct or delete personal information about you in our files.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf.  We will require verification that you provided the authorized agent permission to make a request on your behalf.  You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us. 

Information for Authorized Agents

If you are an authorized agent submitting a request on behalf of an individual, you must attach a copy of the following information to the request:

A completed Authorized Agent Designation Form indicating that you have authorization to act on our Customer’s behalf.

If you are a business located in California, proof that you are registered with the Secretary of State to conduct business in California.

If we do not receive both pieces of information, the request will be denied.

How We Protect Personal Information

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Some of our websites and/or mobile applications permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

Other Important Information

The following additional information relates to our privacy practices:

  • Transmission Of Information To Other Countries. We are an affiliate to a multi-national company. We may transmit information between and among our affiliates and third-party contractors both inside and outside the U.S.  As a result, your information may be processed in a foreign country where privacy laws may be less stringent than the laws in your country.  Nonetheless, where possible we take steps to treat personal information using the same privacy principles that apply pursuant to the law of the country in which we first received your information.  By submitting your personal information to us you agree to the transfer, storage and processing of your information in a country other than your country of residence.  
  • Children’s Privacy. We do not knowingly collect any personal information from children under the age of 13 years. Our websites are directed to persons who are at least 13 years of age. If a parent or guardian is made aware that a child under the age of 13 has provided us with personal information through any point of contact, we ask to be contacted at the below email address, and we will delete the information about the child referenced from our files. If we have actual knowledge that personal information about a person under the age of 13 has been collected without appropriate parental consent, then we will take the appropriate steps to delete such information. We do not sell the personal information of minors less than 16 years of age without affirmative
  • Third Party Applications/Websites. We have no control over the privacy practices of websites or applications that we do not own.
  • Changes To This Privacy Policy. We may change our privacy policy and practices over time.  To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy.  Our privacy policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.
  • Information for California Residents. California law indicates that organizations should disclose whether certain categories of information are collected, “sold” or transferred for an organization’s “business purpose” (as those terms are defined under California law).  You can find a list of the categories of information that we collect and share below. Please note that because this list is comprehensive it may refer to types of information that we share about people other than yourself. If you would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing, please submit a written request to us using the information in the “Contact Information” section below.  We do not discriminate against California residents who exercise any of their rights described in this Privacy Policy.

Contact Information.  If you have any questions, comments, or complaints concerning our privacy practices, or, where required by law, if you would like to submit a request based on a right listed in this policy, please contact us at the appropriate address below.  We will attempt to respond to your requests and to provide you with additional privacy-related information.

Safrapay Inc.

Privacy@safrapay.com

3050 NE Aventura Boulevard

Aventura, Florida 33180

1-877-472-3727

If you are not satisfied with our response, and are in the European Union, you may have a right to lodge a complaint with your local supervisory authority.

California Information Sharing Disclosure

California Civil Code Sections 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicate that organizations should disclose whether the following categories of personal information are collected, transferred for “valuable consideration,” or transferred for an organization’s “business purpose” (as those terms are defined under California law).  Safrapay does not “sell” data under California law. The table below indicates the categories of personal information we collect and transfer in a variety of contexts.  Please note that because this list is comprehensive, it may refer to types of information that we collect and share about people other than yourself.

Categories of Personal Information That We CollectTo Whom We Disclose Personal Information for Business Purpose
Identifiers – such as name, postal address, phone number, unique personal identifier, online identifier, internet protocol (IP) address, device ID, email address, account name, signature, social security number, driver’s license number, passport number, or other similar identifiers.• Data analytics providers
• Marketing communications providers (e.g., email, SMS, post)
• Website/email optimization providers
• Third parties necessary to complete transactions and provide our products/services,
• Internet service providers
• Operating systems and platforms
• Website/email optimization providers
• Data center/host/cloud-service providers
• Third parties who assist with information technology and security programs
• Government entities, law enforcement, and other parties as required by law, including litigation
• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention
Financial information – such as bank account number, credit or debit card number, or other financial information.• Data center/host/cloud-service providers
• Third parties necessary to complete transactions and provide our products/services,
• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention
• Third parties who assist with information technology and security programs
• Third parties who assist with fraud prevention, detection, and mitigation
• Government entities, law enforcement, and other parties as required by law, including litigation
Geolocation data – such as precise physical location.• Data analytics providers
• Website/email optimization providers
• Third parties who assist with information technology and security programs
• Third parties who assist with fraud prevention, detection, and mitigation
• Government entities, law enforcement, and other parties as required by law, including litigation
Electronic and sensory data – such as audio, electronic, visual, thermal, olfactory, or similar information (e.g., pictures, a recording of a customer service call, security video surveillance footage).• Data center/host/cloud-service providers
• Third parties necessary to complete transactions and provide our products/services,
• Third parties who assist with information technology and security programs
• Third parties who assist with fraud prevention, detection, and mitigation
• Government entities, law enforcement, and other parties as required by law, including litigation
Professional/employment information – such as occupation.• Third parties necessary to complete transactions and provide our products/services,
• Third parties who assist with information technology and security programs
• Third parties who assist with fraud prevention, detection, and mitigation
• Government entities, law enforcement, and other parties as required by law, including litigation
Inferences – drawn from any of the information listed above to create a profile• Data center/host/cloud-service providers
• Marketing communications providers (e.g., email, SMS, post)
• Website/email optimization providers

Authorized Agent Designation Form

Instructions: If you are a resident of California and would like to designate an authorized agent to submit a request on your behalf related to your personal information, please complete this form in its entirety.  A signed copy of this form must be submitted to us at the appropriate address below.  Please note, if Safrapay is unable to verify the identity of the individual submitting this form (the “Requestor”), we may ask for additional information or documents for verification purposes.

If sending by mail, please use the following address:
Safrapay, Inc.
3050 NE 199th Street
Miami, FL  33180

If sending by email, please use the following address:
CustomerSupport@Safrapay.com

1. Requestor Information
Full Name:
_
Mailing Address:
_
Email Address:
_
Phone Number:
_
2. Authorized Agent Information
Full Name of Authorized Agent:
_
Email Address of Authorized Agent:
_
Phone Number:
_
Authorized Agent’s California Secretary of State Registration Number1 (if applicable):
_
1 Please note, if you are designating an entity to act on your behalf, California law requires that such entity is registered with the Secretary of State.
3. Authorization
I, Requestor, designate the Authorized Agent listed above for the sole purpose of submitting the following request(s) on my behalf (check all that apply):
☐ Request to delete my personal information; and/or
☐ Request to access my personal information.

By signing below and submitting this Authorized Agent Designation form, I affirm the following:

  • I am a California resident.
  • I am the Requestor whose name appears above and the information provided in this form is true and accurate.
  • The Authorized Agent is a natural person or a business registered with the Secretary of State to conduct business in California.
  • I understand that I may be contacted directly in order to verify my identity and confirm designation of my Authorized Agent.
  • I grant the Authorized Agent permission to submit the request(s) indicated above to SNBNY on my behalf.
  • I authorize SNBNY to process such request(s) and I understand that any responses produced in connection with a request to access my personal information will not be sent to my Authorized Agent but will instead be sent directly to me at the address provided above.
  • The authority granted by this form will terminate 90 days after the date of execution.
  • I agree to indemnify SNBNY for any and all claims that arise against SNBNY in relation to its reliance on this Authorized Agent Designation form.
Signature of RequestorToday’s date (mm/dd/yyyy)

X