Privacy Policy

Last updated: July 2026

This policy explains what data Pay Button (pay-button.com) collects, why we collect it, and how you can have it deleted. We keep it short on purpose.

We never see card numbers. Full card data (PAN, CVC, expiry) is entered on, and handled only by, your connected payment processor (such as Dodo Payments, Paddle, Polar, Lemon Squeezy, PayPal, Stripe, or a custom merchant adapter). Pay Button stores payment metadata such as amount, currency, and status, but never the card details themselves. The card you use for your own platform subscription and platform fees is seen only by Dodo Payments, our billing provider — not by us.

1. Data we store

For account holders (creators):

Email address and password (stored only as a salted hash, never in plain text).
Display name and account settings.
Buttons you create: title, description, amount, currency, label, color, and messages.
Plan and subscription status.
Billing references (such as your Dodo Payments customer and subscription IDs) and your platform-fee and commission history.
Encrypted payment-processor API keys you connect (for example for Dodo Payments, Paddle, Polar, Lemon Squeezy, PayPal, Stripe, or a custom adapter). Secrets are encrypted at rest.
Integration settings you choose to add (for example a connected payments account ID or, if you provide them, encrypted bot tokens). Secrets are encrypted at rest.

For payments (buyers and donors):

Payment metadata: amount, currency, status, and timestamps.
Optional details a buyer chooses to enter: name, email, and a message.
A processor reference and payment-intent ID used to match payments and disputes.
The payer's IP address, used only for fraud prevention and investigations.

We do not store card numbers, CVC codes, expiry dates, or any full cardholder data. That information is collected and processed solely by your connected payment processor, or by Dodo Payments for your platform subscription and fees, on their own systems.

2. Why we use it

To operate your account and your payment pages.
To route payments through your connected processor and meter platform fees.
To show you analytics (views, clicks, payments, revenue).
To detect and prevent fraud, abuse, and prohibited use.
To comply with our legal obligations and respond to lawful requests.

3. Who we share it with

We share data only as needed to run the Service: with your connected payment processor to process payments; with Dodo Payments, our billing provider, to charge your platform subscription and platform fees; and, if you enable reward integrations, with Discord or Telegram to deliver the access you set up. We do not sell your personal data. We may disclose data when required by law or to protect against fraud.

4. Card data and your processor

When a buyer pays, they are taken to your payment processor's secure checkout. Your connected processor is responsible for collecting and protecting card data and for PCI compliance. Separately, the card you use for your own platform subscription and platform fees is handled solely by Dodo Payments, our billing provider. Their handling of personal data is governed by their own privacy policies. Pay Button only receives the result of the payment and the metadata listed above.

5. Retention

We keep account and payment records for as long as your account is active and as long as needed for accounting, tax, dispute, and anti-fraud purposes. Fraud-prevention logs (such as IP addresses) are retained for a limited period and then removed.

6. Your rights and deletion

You can access and update most of your data from your dashboard. You may request a copy of your data or deletion of your account and personal data by emailing privacy@pay-button.com. We will delete data on request, except records we must keep to meet legal, tax, or anti-fraud obligations. Buyers who provided an email with a payment may also request deletion of that information.

7. Security

Passwords are hashed, integration secrets are encrypted at rest, and access to data is restricted. No system is perfectly secure, but because we never hold funds or card numbers, the most sensitive data never touches our servers.

8. Changes

We may update this policy; material changes are reflected by the "Last updated" date above.

9. Contact

Privacy questions or deletion requests: privacy@pay-button.com. Report abuse: abuse@pay-button.com.