Privacy Policy

KAJA Payments ("KAJA," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit www.kajapayments.com (the "Site"), why we collect it, who we share it with, and the choices and rights you have.

1. Scope of This Policy

This Policy covers information collected through the Site, including our contact and inquiry forms and the event- and partner-specific landing pages we host.

This Policy does not cover:

• Merchant applications and underwriting. If you apply for a merchant account, the information you provide during the application, underwriting, and onboarding process is handled under your merchant application, merchant processing agreement, and the privacy notices of our sponsoring banks and processing partners, not this Site policy.
• Payment and cardholder data. The Site does not accept or process payments, and we do not collect payment card numbers, bank account numbers, or Social Security numbers through this Site. Cardholder data arising from processing services we provide to merchants is governed by the applicable merchant agreement, card network rules, and PCI DSS requirements.
• Third-party websites. See Third-Party Links below.

2. Information We Collect

Information you give us directly

When you submit a form on the Site, we collect the information you enter. Our contact and inquiry forms ask for:

• First and last name
• Business email address
• Phone number
• Business name
• Inquiry type — for example, merchant request, agent/ISO partnership, bank or financial institution partnership, or ISV partnership
• The contents of your message, including anything you choose to tell us about your business

All of these fields are required to submit the form. Please do not include sensitive personal information — such as Social Security numbers, full account numbers, or health information — in the free-text message field. We do not need it to respond to your inquiry.

If you reach us by phone or email instead of a form, we collect whatever information you choose to share in that conversation.

Information we collect automatically

Like virtually all websites, our hosting infrastructure generates server logs when a page is requested. These logs may include your IP address, browser type and version, operating system, the page requested, the referring page, and the date and time of the request. We also record which landing page a form was submitted from so we know which event or partner referral an inquiry came from.

We use these logs for security, abuse prevention, troubleshooting, and understanding overall traffic volume. We do not use them to build advertising or behavioral profiles.

3. How We Use Information

We use the information described above to:

• Respond to your inquiry and provide the information, quote, or consultation you asked for
• Route your inquiry to the right person on our team — for example, our partner team for ISO and referral inquiries
• Evaluate whether our services are a fit for your business, and follow up about that
• Create and maintain a record of the inquiry in our customer relationship management (CRM) system so we can track our conversation with you
• Communicate with you about our services, programs, and events you have expressed interest in
• Operate, secure, maintain, and improve the Site
• Comply with applicable laws, regulations, card network rules, and lawful requests, and to enforce our terms and protect our legal rights

We do not use the information you submit through the Site to make automated decisions that produce legal or similarly significant effects about you.

4. Cookies and Tracking

We do not use cookies to track you across websites, and we do not place advertising or analytics cookies on this Site. We do not display third-party advertising on the Site.

The Site loads the Inter typeface from Google Fonts. When your browser requests those font files, Google receives your IP address and standard request information as a technical necessity of delivering the files. Google's handling of that data is described in the Google Privacy Policy.

Because we do not perform cross-site tracking, there is nothing for a "Do Not Track" or Global Privacy Control signal to opt out of on this Site. We honor such signals to the extent they apply.

5. How We Share Information

We do not sell your personal information. We share it only in the circumstances below.

Who	What they receive and why
Our team	Form submissions are emailed to our internal inboxes and, depending on your inquiry type or the event you came from, to the specific KAJA representative who will follow up with you.
Our CRM provider	We create a lead record in our third-party customer relationship management platform containing your name, email, phone, business name, inquiry type, message, and lead source, so we can manage and track our follow-up.
Email and hosting providers	Our email delivery provider transmits form notifications to our team, and our web hosting provider stores the server logs described above. They process this information on our behalf and are not permitted to use it for their own purposes.
Banks, processors, and referral partners	If you ask us to pursue a merchant account or a partnership, we share the business contact details needed to move that request forward with the relevant sponsoring bank, processor, or referral partner. If you were referred to us by a partner or reached us through a partner landing page, we may confirm the status of your inquiry with that partner.
Professional advisors	Our attorneys, accountants, auditors, and insurers, where reasonably necessary and subject to confidentiality obligations.
Legal and safety	Where required by law, subpoena, or regulatory request, or where we believe disclosure is necessary to investigate fraud, protect the security of our systems, or protect the rights, property, or safety of KAJA, our customers, or the public.
Corporate transactions	In connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor the commitments in this Policy.

6. How Long We Keep It

We keep the information you submit for as long as we have an active relationship or an active inquiry with you, and afterward for as long as we reasonably need it to:

• Follow up on your inquiry or resume a conversation you started
• Meet our recordkeeping, tax, audit, and regulatory obligations, which in the payments industry commonly require records to be retained for several years
• Resolve disputes and enforce our agreements

Server logs are retained for a shorter period, consistent with our security and troubleshooting needs. When information is no longer needed for these purposes, we delete it or de-identify it. You may ask us to delete your inquiry record sooner — see Your Choices.

7. How We Protect It

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, and destruction. These include encryption of data in transit to and from the Site, access controls that limit internal access to those with a business need, restricted origins for form submissions, and use of reputable service providers for email, hosting, and CRM.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please avoid sending sensitive information such as account numbers or Social Security numbers by unencrypted email or through the Site's message field.

8. Your Choices

• Stop hearing from us. Reply to any message from us asking to be removed, use the unsubscribe link where one is present, or email info@kajapayments.com. We may still send you messages necessary to complete a transaction or respond to a request you initiated.
• Access, correct, or delete your information. Email info@kajapayments.com and tell us what you would like us to do. We honor these requests regardless of where you live, subject to any records we are legally required to keep.
• Don't submit the form. You can browse the Site without submitting any information. If you prefer not to use the form, call us at (833) 327-5252.

9. California Privacy Rights

This section applies to California residents and supplements the rest of this Policy, as required by the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA").

Categories of personal information we collect

Category	Examples we collect
Identifiers	Name, business email address, phone number, IP address
Commercial information	The products or services you inquire about, your inquiry type, and the contents of your message
Professional or employment-related information	Your business name and your role or affiliation with that business, if you share it
Internet or network activity	Server log data such as pages requested, referring page, browser and device type, and timestamps

We collect this information from you directly and, for log data, automatically from your device when you visit the Site. We use it for the purposes described in How We Use Information and disclose it for the business purposes described in How We Share Information.

We do not collect sensitive personal information through the Site as that term is defined under the CCPA/CPRA. In the preceding twelve months, we have not sold personal information and have not shared personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Your rights

• Right to know. Request the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the categories of third parties to whom we disclosed it.
• Right to delete. Request deletion of personal information we collected from you, subject to legal exceptions.
• Right to correct. Request correction of inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We will update this Policy if that ever changes.
• Right to limit use of sensitive personal information. We do not collect sensitive personal information through the Site.
• Right to non-discrimination. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised any of these rights.

How to exercise your rights

Email info@kajapayments.com with the subject line "Privacy Request," or call (833) 327-5252. Please tell us what right you wish to exercise and provide enough information for us to locate your records — typically the name, email address, phone number, and business name you used when you contacted us.

We will acknowledge your request within 10 business days and respond within 45 calendar days, and we will tell you if we need up to an additional 45 days. We must verify your identity before acting on a request to know, delete, or correct; we do this by matching the information you provide against our records and may follow up for additional confirmation. We will not disclose specific pieces of personal information if we cannot verify your identity.

An authorized agent may submit a request on your behalf. We will ask the agent for proof of your written permission and may ask you to verify your identity with us directly.

10. Other State Privacy Rights

Residents of other states with comprehensive consumer privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and a growing number of others — have similar rights to confirm whether we process their personal data, access it, correct it, delete it, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling. As described above, we do not conduct targeted advertising, sell personal data, or engage in profiling that produces legal or similarly significant effects.

To exercise these rights, use the same contact methods described in the California section. If we decline your request, we will explain why, and you may appeal that decision by replying to our response with the word "Appeal." We will respond to an appeal within 45 days and, if we deny it, tell you how to contact your state attorney general.

11. Children's Privacy

The Site is a business-to-business website intended for business owners and industry partners. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

12. Third-Party Links

The Site may link to third-party websites, partner pages, or resources we do not control. This Policy does not apply to those sites, and we are not responsible for their content or privacy practices. Please review the privacy policy of any site you visit.

13. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology, or legal requirements. The version posted on this page is always the one in effect, and we will revise the last-updated date at the foot of this page when it changes. If we make material changes to how we handle information collected through the Site, we will provide a more prominent notice. Your continued use of the Site after an update means you accept the revised Policy.

14. How to Contact Us

Questions, concerns, or privacy requests? We're happy to help.

This Privacy Policy was last updated on September 10, 2026.