Privacy Policy

Overview

Rainforest provides components, tools, and services to software Platforms to enable them to securely embed payment flows.Rainforest recognizes the importance of privacy. We want you to feel confident using our Services, and this privacy policy is to help you understand and describe how we collect, use, and disclose your information.This privacy policy describes what personal information Rainforest collects in connection with your access and use of our Services, how we use it, who we share it with, and what steps Rainforest takes to protect and secure this data.

By continuing to use or access our Services, you are consenting to the practices described in this privacy policy.

Definitions
Throughout this policy, we will use a few terms to describe various products and roles.

“Rainforest,” “we,” “our,” or “us” means Rainforest Pay, Inc.

Depending on the context, “you” means Platform, Merchant, End Customer, or Visitor.

“Platforms” are independent software vendors who embed Rainforest Services into their software offering.

“Merchants” are customers of the Platforms who use Rainforest Services to process payments for End Customers.

When you do business with, or otherwise transact with, a Merchant, (e.g., you purchase something from a Merchant using your credit card) but are not directly doing business with Rainforest, we refer to you as an “End Customer.”

A “Visitor” is anyone who visits the Rainforest website.

“Services” means Rainforest’s websites (including developer documentation), products, embedded payment components, and other services.

“Personal Data” is any information that identifies, or can be reasonably used to identify, you that we collect or you provide to us when using our Services.

Platform Personal Data

Personal Data that we collect in regards to Platforms and why:

Registration and contact information:
As a Platform, you will have users who register for and log into the Platform portal or other Rainforest Services to manage your account. For these users, we collect their name, registration information (e.g., username), and contact information (e.g., email address). We use this information to provide Services, provision and secure Platform user accounts, authenticate users, and provide customer service to the Platform.

Usage data:
As Platform users interact with the Rainforest website, we gather cookies, device data, IP address information, and similar usage data in order to provide Services, troubleshoot, and improve our website.

How we share Personal Data related to Platforms:
Service Providers: We share Personal Data of Platform users with third party service providers (such as authentication services, to securely and accurately authenticate you to the Rainforest Platform portal).

More: Please see below for information about additional ways Personal Data generally is shared.

Merchant Personal Data

Personal Data that we collect in regards to Merchants and why:
Underwriting and application data: In order to underwrite the Merchant and provide Services, identify and verify ownership details, and comply with applicable regulations such as Anti-Money Laundering (“AML”) and Know Your Customer (“KYC”) obligations, we collect the identity information of the beneficial owners and control persons of the Merchants, as well as other required information for underwriting and regulatory compliance. This may include name, taxpayer information numbers, dates of birth, contact information, documentation, financial information, and other such data.

Bank account information: If the Merchant is a sole proprietor without a commercial account, or uses a non-commercial account to use the Services, we will collect your personal bank account information.

Usage data: As Merchant users interact with the Rainforest website, we gather cookies, device data, IP address information, and similar usage data in order to provide Services, troubleshoot, and improve our website.

How we share Personal Data related to Merchants:
Service providers: We share Merchant Personal Data, including underwriting and application data, with third-party service providers (such as identity verification providers and fraud services).

Financial partners: In order to provision and provide payment processing services (such as provisioning a merchant identification number, providing tax reporting, and deposit funds), we share Merchant Personal Data with financial institutions, processors, payment card associations, and other entities that are involved in the payment process, such as our sponsor bank.

Platform partners: As you are a customer of the Platform, we may share Merchant Personal Data with the Platform as necessary to provide the Services.

More: Please see below for information about additional ways Personal Data generally is shared.

End Customer Personal Data

Personal Data that we collect in regards to End Customers and why:

Payment processing data:
When you make payments to, receive payments or refunds from, or transact with a Merchant, Rainforest receives transaction data, which may include your name, payment method information (such as your bank account number and credit or debit card number), billing information, and any metadata related to the transaction provided by the Platform to accompany the payment.

We only collect and use this data based on the direction of the Platform and the Merchant. Rainforest does not use this data for any other reason besides providing payment processing services at the direction of the Platform and Merchant. Please refer to your Platform and Merchant’s privacy policies for additional information.

Usage data:
When you interact with a Rainforest Service to process a payment, we collect device, usage, and log data (such as IP address). This data allows us to secure your payment session, prevent fraud, and provide troubleshooting. In this instance, we do NOT use tracking cookies, only temporary session cookies.

How we share Personal Data related to End Customer:

Service providers: We share End Customer Personal Data, payment information such as cardholder or bank account holder name and account numbers, with service providers (such as fraud services).

Financial partners: In order to provide payment processing services (such as process an End Customer credit card transaction), we share your data with financial institutions, processors, payment card associations, and other entities that are involved in the payment process (such as our sponsor bank and gateway).

Merchant Partners: We share End Customer Personal Data, especially limited payment processing data, with the Merchants, as the Merchant is the party who is initiating the payment with the End Customer.

Platform Partners: We share End Customer Personal Data, especially limited payment processing data, with our Platforms.

More: Please see below for information about additional ways Personal Data generally is shared.

Visitor Data

Information you provide:
When you visit our websites, you may provide information via webforms, such as your name, email address, and a brief message. Additionally, if you apply for a job via our website, you may provide Personal Data such as your name, email address, phone number, mailing address, and other personal details that may appear on a resume such as education and work history.

Usage data:
As Visitors interact with the Rainforest website, we gather cookies, device data, IP address information, and similar usage data in order to provide Services, troubleshoot, and improve our website. Cookies are small pieces of information that are stored by your browser on your computer’s hard drive. While most browsers are set to accept cookies by default, you can set yours to refuse cookies or alert you before accepting them.

Our website also uses third parties to assist us in analyzing data regarding Visitors to our website. For example, we use Google Analytics to collect information such as the number of Visitors to the site, the webpage that referred Visitors to a site, and the pages Visitors view within our site. You can opt-out of Google Analytics by downloading Google’s Opt-Out Browser Add-on.

Other Ways we Share Personal Data:

Hosting and infrastructure services: We rely on other service providers to provide Rainforest with infrastructure across such critical services as hosting, content delivery networks, logging, and alerting.

Law enforcement and regulatory bodies: We may share Personal Data in such instances where we must do so to comply with applicable law, legal requests, and regulations (such as card brand and governmental regulations) or where appropriate to investigate fraud or other violation of safety or property.

In connection with, or during the negotiation of any merger, acquisition, divestiture, dissolution, or other such change in our majority equity ownership.

To our third party service providers so they may help us provide you with our Services.

We may also use and share with third parties aggregated or anonymized information that does not specifically identify you or any individual user of our Services.

Children

Rainforest Services are not intended for children under the age of 18. In addition, our website is not targeted at children under the age of 13 and we do not knowingly collect Personal Data from children under the age of 13, in accordance with the Children’s Online Privacy Protection Act. If you are under the age of 13, please do not submit information to us. If we have reason to believe that we have collected any information from a child under the age of 13, we will take all reasonable steps to delete such information.

Third Party Links

Our website may contain links to third party websites. Rainforest exercises no control over such other websites and is not responsible for the privacy practices of such. This privacy policy does not apply to third party websites and we recommend that you review the privacy policy of any website you visit to determine how the operator handles personal information collected through its website.

Security
We take reasonable measures, including administrative, technical and physical safeguards to help protect your Personal Data from loss, theft, misuse, unauthorized access, disclosure, alteration and destruction. We maintain security standards and procedures designed to prevent unauthorized access to your data.

GDPR and International Visitors

This site and our Services are designed for users from the United States. By using this site, users from other countries consent to the transfer of any personal or other information collected to the United States and housed on servers in the United States and your information will be subject to use and disclosure in accordance with this Policy and applicable United States federal, state, and local law.

Changes to this Policy
We may make changes or adjustments to this policy from time to time to reflect changes in our Services or privacy practices or to comply with new legal or regulatory obligations. Any changes are effective when we post the revised Policy on our website. While we reserve the right to make changes as necessary, we will make reasonable efforts to notify you of material changes to this policy.

Contact Details
If you have questions or comments regarding this policy or wish to exercise your rights set forth herein, feel free to email us at hello@rainforestpay.com with your concerns or request.