Privacy policy

A&A Finance of Columbus, Inc. ("A&A Finance," "we," "us," or "our") is committed to protecting the privacy of everyone who uses our services — whether you are a business owner collecting payment or a customer making one. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your own data. We encourage you to read it carefully. If you have questions, contact us at [email protected].

We collect only the information necessary to provide our services securely and accurately. Information you provide directly: • Name and contact information (email address, phone number) • Business name and address (for merchant accounts) • Payment information — card type, last four digits, expiration date (we do not store full card numbers or CVV codes) • Transaction details — amount, date, recipient, payment method Information collected automatically: • Device information (browser type, operating system) • IP address and approximate location • Pages visited and time spent (for security and fraud prevention) • Transaction logs (required by financial regulations) We do not sell your personal information to anyone, ever.

We use the information we collect to: • Process and complete your payment transactions • Send you transaction confirmations and receipts • Detect and prevent fraud and unauthorized activity • Comply with applicable laws, regulations, and financial reporting obligations • Respond to your support requests • Improve the security and reliability of our platform We do not use your information for advertising or marketing to third parties.

We share your information only as necessary to provide our services: Payment processors: We work with licensed payment networks to route transactions. These processors receive only the minimum information needed to complete your payment and are bound by their own compliance and security obligations. Legal requirements: We may disclose information when required by law, court order, or government authority — including compliance with Bank Secrecy Act and anti-money-laundering regulations. Business parties to your transaction: The seller receives confirmation that payment was received, the amount, and the date. They do not receive your full card number, bank account details, or any other sensitive financial information. We do not sell, rent, or trade personal information to third parties for commercial purposes.

We take data security seriously. Our security measures include: • PCI DSS Level 1 certification — the highest tier of payment card industry compliance • 256-bit SSL/TLS encryption for all data transmitted through our platform • Tokenization of payment data — your card information is replaced with a secure token and never stored in plaintext • Access controls that limit employee access to personal data on a need-to-know basis • Regular security audits and vulnerability testing No method of transmission or storage is 100% secure. If you believe your information has been compromised, contact us immediately.

We retain your information for as long as necessary to: • Provide our services to you • Comply with financial record-keeping requirements (typically 5–7 years under applicable law) • Resolve disputes and enforce our agreements When we no longer need your data, we securely delete or anonymize it. You may request deletion of your personal data at any time, subject to our legal obligations to retain certain records.

Depending on your location and applicable law, you may have the right to: • Access the personal information we hold about you • Correct inaccurate or incomplete information • Request deletion of your personal information (subject to legal retention requirements) • Object to or restrict certain processing of your data • Receive a copy of your data in a portable format To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

We use a small number of cookies and similar technologies to: • Keep you signed in to your account during a session • Prevent fraud and protect the security of transactions • Understand how our site is used so we can improve it We do not use tracking cookies for advertising. You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our payment platform.

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will post the updated policy on our website with a revised effective date. For material changes, we will also notify registered users by email. Your continued use of our services after any changes takes effect constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests related to your privacy, please contact us: A&A Finance of Columbus, Inc. Columbus, Ohio 43215 Email: [email protected] Phone: (614) 555-0180 Hours: Monday – Friday, 9:00 AM – 6:00 PM Eastern