1. Scope
Hiveway Inc. provides NectarPay, a payment and point-of-sale software product for merchants. This Privacy Policy explains how Hiveway Inc. collects, uses, stores, discloses, and protects personal information in connection with NectarPay.
NectarPay is used by businesses. When a merchant enters or processes information about its customers, personnel, or business contacts, the merchant is responsible for ensuring it has authority to provide that information to NectarPay. Payment processors and other third parties may also collect, use, and process information under their own privacy policies and terms.
2. Information we collect
We collect and process information needed to provide, secure, support, and improve NectarPay. The information collected depends on how a merchant configures and uses the service.
a. Account, administrator, and user information
We may collect names, email addresses, authentication identifiers, roles, permissions, account status, subscription status, business names, business contact details, and account settings for owners, administrators, employees, contractors, invited users, and other authorized users.
b. Merchant business and configuration information
We may collect business information entered into NectarPay, including locations, terminals, catalog items, prices, product groups, product tags, taxes, customers, receipts, reports, scheduled reports, webhook settings, integrations, and other configuration or operational data.
c. Customer, receipt, transaction, and payment metadata
We may collect transaction and payment-related metadata, such as payment identifiers, amounts, currency, timestamps, locations, terminals, cart details, receipt information, refund and dispute metadata, customer contact details supplied for receipts or records, and processor status information.
Full payment card numbers and CVV codes are handled by payment processors such as Stripe and are not stored by Hiveway Inc.
d. Support communications
If you contact us for support or use a support channel, we may receive the information submitted through that process, including your name, email address, company information, support request details, attachments, screenshots, diagnostic information, and correspondence history.
e. Device, usage, log, and security information
We may collect device and browser information, IP addresses, usage events, diagnostic data, error reports, logs, security events, authentication events, terminal/device metadata, and similar technical information needed to operate, secure, troubleshoot, and improve NectarPay.
f. Information from processors and integrations
To provide NectarPay, we may receive information from payment processors, cloud services, authentication providers, email providers, webhook endpoints, and other integrations configured by a merchant or used to operate the service. This may include processor record identifiers, operational metadata, account status information, and data needed to complete payment, receipt, reporting, support, or integration workflows.
3. How we use information
We use information collected through NectarPay to:
- provide, operate, maintain, authenticate, and improve NectarPay
- support payment, refund, catalog, cart, receipt, customer, terminal, tax, reporting, webhook, scheduled report, and account workflows
- process account administration, subscriptions, settings, and user access
- respond to support requests, troubleshoot issues, and communicate with users
- monitor reliability, diagnose errors, secure the service, and protect against misuse, abuse, fraud, or unauthorized access
- comply with legal, regulatory, contractual, accounting, tax, security, and recordkeeping obligations
- enforce our terms, policies, and agreements
- create aggregated or de-identified information to understand service performance and improve product features, provided it does not identify an individual or merchant customer
4. How we share information
We do not sell personal information in the ordinary meaning of selling customer lists for money. We may share information in the following circumstances:
- with authorized users of the merchant account according to their roles and permissions
- with payment processors and integration providers where needed to provide NectarPay functionality
- with service providers that help us host, operate, secure, monitor, support, communicate, analyze, or improve NectarPay
- with professional advisors, insurers, auditors, and legal representatives where reasonably necessary
- when required or permitted by law, regulation, legal process, governmental request, or to protect rights, safety, security, or property
- in connection with a merger, acquisition, financing, reorganization, asset sale, or similar business transaction
5. Service providers and third parties
We use third-party service providers to help deliver NectarPay. These may include payment processors such as Stripe, cloud hosting and storage providers, authentication providers, analytics and monitoring tools, communications and email providers, support systems, security tools, and other vendors or integrations used to operate the service.
These providers may process information on our behalf or under their own terms and privacy practices. We limit vendor access to information needed for their services and require appropriate safeguards where applicable.
6. Data retention
We retain information for as long as reasonably necessary to provide NectarPay, maintain merchant account continuity, support returning users, resolve disputes, enforce agreements, comply with legal, tax, accounting, security, and contractual obligations, and support legitimate business purposes.
Because merchants may need transaction, receipt, report, tax, customer, and account records for business and legal purposes, some records may be retained after active use of the service ends unless deletion is requested and deletion is legally, technically, and contractually permitted. Support records may also be retained to manage ongoing customer relationships and document prior interactions.
7. Data security
We use reasonable administrative, technical, and organizational safeguards designed to protect information processed through NectarPay against unauthorized access, loss, misuse, alteration, or disclosure.
No method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security. Merchants are responsible for protecting their own devices, users, networks, credentials, terminals, integrations, and account access.
8. International data transfers
Hiveway Inc. is based in Ontario, Canada. Information may be processed or stored in Canada, the United States, or other jurisdictions where Hiveway Inc., payment processors, service providers, or merchant-configured integrations operate.
As a result, information may be subject to laws of jurisdictions different from your own.
9. Your choices and privacy rights
Subject to legal, contractual, security, and business limits, individuals may request access to or correction of their personal information, ask questions about our privacy practices, or withdraw consent where processing is based on consent. Withdrawal of consent may affect the ability to use NectarPay or provide requested services.
Depending on your location and applicable law, you may have additional privacy rights, including rights to request deletion of certain personal information. We may need to verify your identity and authority before responding to a privacy request.
If your information was provided to NectarPay by a merchant, or if the request relates to records controlled by a merchant account, we may direct you to that merchant or work with the merchant to respond. Some information may also need to be accessed, corrected, deleted, or managed through the merchant account administrator, payment processor, or relevant integration provider.
If you have a privacy concern or complaint, contact privacy@hiveway.com. We will review and respond in accordance with applicable Canadian privacy laws, including PIPEDA where applicable, and other laws that may apply.
10. Children’s privacy
NectarPay is intended for business use and is not directed to children. We do not knowingly collect personal information from children through NectarPay. Do not use NectarPay to knowingly submit personal information from children unless you have all required authority and consent under applicable law.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may provide notice by updating the effective date, through NectarPay, by email, or by other reasonable means. Continued use of NectarPay after an updated Privacy Policy becomes effective means the updated policy applies going forward.
12. Contact us
If you have questions about this Privacy Policy or want to make a privacy-related request, contact Hiveway Inc. at privacy@hiveway.com or at the mailing address below.