Privacy Policy

Last updated: June 30, 2026

Paypr is a mobile point-of-sale app that lets small businesses in Puerto Rico accept card payments and track sales for tax compliance. This policy explains what information we collect when you use Paypr, how we use it, and the choices you have. "We," "us," and "Paypr" refer to the operator of the Paypr app and this website.

Who this policy is for

Paypr is a business tool used by merchants (the business owners and staff who sign in to accept payments). Paypr is not a consumer app; we do not create accounts for the customers who pay a merchant. When a customer pays, their payment is processed by Stripe, our payment processor, under Stripe's own privacy policy.

Information we collect

  • Account information. Your email address and business (display) name, used to create and secure your merchant account and to sign you in.
  • Sales and catalog data. The products/services you configure, their prices and IVU (sales-tax) settings, and the transaction records you create — amounts, tax, tips, timestamps, status, and any notes you add. This is the data we export for your SURI tax filing.
  • Payment-processing data (via Stripe). To accept payments you connect a Stripe account. Stripe collects and verifies the identity, banking, and tax information it needs to process payments and pay you out (this is Stripe's KYC process). We store only a reference to your Stripe account and your onboarding status — we do not collect or store your full identity or banking details; Stripe does, under its own privacy policy.
  • Support communications. Feedback or support messages you send us through the app, so we can respond and improve the product.
  • Technical and diagnostic data. Basic app and device information such as the app version, and crash/error diagnostics that help us fix problems and keep the app reliable. We may use limited product-analytics data to understand how features are used.

What we do NOT collect

We never see or store card numbers. Card details are captured and encrypted directly by Stripe and Apple's Tap to Pay on iPhone; they do not pass through or get stored on Paypr's systems. We do not sell your personal information, and we do not use your data for third-party advertising.

How we use your information

  • To provide the app: accept payments, record sales, and generate your tax-filing exports.
  • To create, secure, and support your account.
  • To meet legal and tax obligations (including Puerto Rico IVU/sales-tax and U.S. anti-money-laundering record-keeping).
  • To keep the app reliable and secure, and to improve it.

How we share information

We share information only with service providers that help us run Paypr, and only as needed:

  • Stripe — payment processing, payouts, and identity verification.
  • Supabase — secure database and authentication hosting.
  • Sentry — crash and error diagnostics.
  • PostHog — product analytics (where enabled).

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Waitlist sign-ups

If you join our pre-launch waitlist at paymentpr.com, we collect the information you submit — your name, business name, WhatsApp number, and/or email address — so we can contact you when Paypr launches. We also generate and store a salted, one-way cryptographic hash of the IP address the submission came from, used only to detect and limit automated abuse of the waitlist form; we do not store the IP address itself, and the hash cannot be reversed to recover it. We keep waitlist submissions until we have reached out about launch and for a limited period afterward, or until you ask us to delete them, whichever comes first. To request deletion of your waitlist submission, email us at ops@paymentpr.com.

Data retention

We keep your account and sales data for as long as your account is active. If you delete your account, we remove your profile, login, and personal information after a 30-day grace period. For legal and tax-compliance reasons we are required to retain certain transaction and tax records (including IVU/sales-tax and payment records) in restricted, de-identified form for the periods required by Puerto Rico tax law and U.S. anti-money-laundering regulations.

Your choices and rights

You can access and update your account information in the app. You can request deletion of your account and personal information at any time — in the app, or at paymentpr.com/delete-account. Depending on your location, you may have additional rights over your personal information; contact us to exercise them.

Security

We protect your information with industry-standard safeguards, including encryption in transit and at rest, and access controls that restrict sensitive records. No system is perfectly secure, but we work to protect your data and to limit what we collect in the first place.

Children

Paypr is a business tool intended for adults operating a business. It is not directed to children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.

Contact us

Questions about this policy or your data? Email us at ops@paymentpr.com.