Privacy Policy
Effective September 14, 2026
1. What we collect
When an organization creates a checkout we store the checkout details and the organizer's name and email. For each participant we store a name, email, and assigned amount. Payment card data is handled entirely by Stripe and never touches our servers.
2. How we use it
We use this information to display checkout progress, send payment invitations and reminders, confirm payments via Stripe webhooks, and provide organizers with a private dashboard. We do not sell personal data.
3. Participant privacy
Participants never see each other's contact or payment details — only their own share and the public checkout summary. Organizer and participant email addresses are hidden from public share pages and restricted to the organization owner's dashboard.
4. Secure links
Organizers and participants access their pages through high-entropy, revocable secure tokens instead of logins. An organization can reset its organizer link at any time to invalidate a leaked URL.
5. Payment data
All card processing is performed by Stripe, a PCI-compliant provider. Paywalla receives payment confirmations and identifiers from Stripe but does not store, transmit, or access card numbers or authentication data.
6. Data retention
We retain checkout, participant, contribution, and audit records for as long as needed to operate the service, support refunds and disputes, and meet legal obligations. Organizations may request deletion of their own data.
7. Your choices
Organizations can manage and remove participants, update their profile, and disconnect Stripe at any time. Participants can contact the organization or Paywalla to request access to or deletion of their own records.
8. AI and connected clients (including ChatGPT)
Paywalla offers an MCP (Model Context Protocol) server so AI assistants such as ChatGPT and other clients you authorize can check your organization's readiness and create checkouts on your behalf, using your Paywalla session via OAuth. When you authorize a client, it may process the following information: your Paywalla account and organization identity (organization name, default currency, and Stripe connection status); checkout titles and descriptions; organizer names and email addresses; participant names and email addresses; assigned amounts; deadlines; and payment-collection status or readiness information. Paywalla also records audit and security entries — such as which authorized client created a checkout and when — for checkouts an AI client creates. This data is processed to let the AI check whether your organization is ready to accept payments, to build and publish a checkout from your instructions, to send the organizer and participant emails exactly as the web app does, and to maintain a security audit trail. Payment-card data never passes through ChatGPT or any AI client: all card processing is performed by Stripe, a PCI-compliant provider, and Paywalla itself never stores, transmits, or accesses card numbers or authentication data. The private organizer and participant payment links and your Paywalla API key are never returned to the AI client — the integration only confirms that a checkout was created and returns a non-sensitive checkout reference. Audit and security records related to AI-created checkouts are retained under the same practices described in section 6, and organizations and participants may request deletion of their own data as described in section 7. You can revoke an AI client's access at any time from your Paywalla settings, which immediately stops it from reading your information or creating new checkouts.
9. Contact
For privacy questions or requests, contact the support email listed at the bottom of this page.
Questions about this policy? Contact support@paywalla.co.