Privacy Policy

1. Who We Are

Pay-E Pty Ltd ("Pay-E", "we", "us") operates the Pay-E platform at pay-e.com.au. We are subject to the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

Merchant information: Name, email address, business name, ABN, and Stripe account identifier when you sign up or connect your Stripe account.

Customer information (processed on your behalf): Australian mobile phone numbers and optional name/email entered by your staff when creating orders. Pay-E processes this data as your data processor.

Order data: Menu items, quantities, amounts, order status, and payment link activity timestamps.

Usage and technical data: Server logs, IP addresses, browser/device type, and anonymised application error reports collected for security and operational purposes.

3. How We Use Your Information

To provide the Service — creating orders, generating payment links, sending payment-link SMS, and tracking payment status via Stripe webhooks.
To protect merchants — detecting and flagging customers who repeatedly fail to complete payment.
To bill the Service — calculating SMS allowance use and any overage that flows through to your Stripe invoice.
To communicate with you — service notices, billing receipts, and support responses.
To comply with legal obligations.

4. Payment Data

Pay-E does not collect, store, or process card numbers or banking details. All card entry is handled by Stripe's hosted Checkout environment. Refer to Stripe's Privacy Policy for how Stripe handles payment data.

5. Sub-Processors

We do not sell your data. We share data only with the following sub-processors, and only as needed to run the Service:

Stripe, Inc. — payment processing, Stripe Checkout hosting, Stripe Connect payouts.
Twilio Inc.— SMS delivery for payment links and order updates. Twilio receives the customer's mobile number and the SMS body.
Sentry — application error monitoring. Sentry receives anonymised server logs and stack traces. Card numbers and full customer records are excluded from error reports.
Cloud hosting provider — application and database hosting under a data processing agreement. See the Data Protection page for the current provider and region.
Legal authorities — where required by Australian law.

6. Data Retention

We retain data only as long as needed for each purpose:

Order records, invoices, totals: 7 years (Australian Tax Office record-keeping requirement).
Customer phone numbers: retained for 7 years, scoped to the merchant who recorded them.
Server logs and error traces: 90 days.
Cancelled-account data: on account termination, you may request an export within 30 days, after which data is deleted (except where retention is legally required).

7. Security

We use HTTPS everywhere with modern TLS, encrypted database storage, and role-based access controls. Payment link tokens are random and unguessable. We conduct periodic security reviews. If we discover a security incident affecting your data, we will notify affected merchants within 72 hours of confirmation.

8. Cookies and Analytics

Pay-E uses strictly necessary cookies to keep you signed in. We do not use third-party advertising trackers. Sentry stores anonymised session metadata for error correlation only.

9. Sub-Processor Changes

We notify merchants by email at least 30 days before adding a new sub-processor that handles personal data, except where shorter notice is required by law.

10. Access and Correction

You may request access to or correction of your personal information by contacting privacy@pay-e.com.au. We will respond within 30 days.

11. Complaints

If you believe your privacy rights have been breached, contact us first. If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the dashboard or email.

13. Contact

Pay-E Pty Ltd
Email: privacy@pay-e.com.au