Privacy Policy

1. Introduction

This Privacy Policy describes how PayForSay s.r.o. ("we," "us," or "7Konto"), operator of the 7Konto closed-loop payment platform, collects, uses, discloses, and protects personal data of visitors to our website and users of our services.

We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the Slovak Data Protection Act, and other relevant regulations.

2. Data Controller

The data controller responsible for the processing of your personal data is:

3. Information We Collect

3.1 Information you provide directly

We collect information you provide when using our services, including:

• Contact information (name, email, phone number, company name)
• Business information (company details, industry, use case)
• Communication with us (support requests, inquiries)
• Payment information (billing details processed through third-party payment processors)
• Account credentials (username, password hashes — never plain-text passwords)

3.2 Information collected automatically

When you visit our website or use our services, we automatically collect:

• Device information (browser type, operating system, IP address)
• Usage data (pages visited, time spent, referring URLs)
• Cookies and similar technologies (see Cookie Policy below)
• Server logs (for security and troubleshooting)

3.3 Information from third parties

We may receive information from third parties such as:

• Business partners who refer you to us
• Payment processors (transaction details, not full card data)
• Public sources (LinkedIn, company websites for B2B outreach)

4. How We Use Your Information

We use your personal data for the following purposes:

• Providing and maintaining our services
• Processing transactions and managing your account
• Communicating with you (responding to inquiries, providing updates, support)
• Improving our services (analytics, product development)
• Marketing (with your consent, for direct marketing communications)
• Complying with legal obligations (tax, accounting, regulatory requirements)
• Protecting our rights and preventing fraud

5. Legal Basis for Processing

Under GDPR, we process personal data based on the following legal grounds:

• Contract: Processing necessary to provide our services to you
• Legal obligation: Processing required to comply with applicable laws
• Legitimate interests: Processing for our legitimate business interests (analytics, security, fraud prevention)
• Consent: Processing based on your explicit consent (for marketing communications, optional cookies)

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers (hosting, payment processing, email delivery) — under Data Processing Agreements
• Business partners (if you're introduced through a partner referral)
• Legal authorities (when required by law or to protect our rights)
• Successors (in case of merger, acquisition, or asset sale — with appropriate protections)

All service providers are bound by data processing agreements and are required to protect your data.

7. Data Storage and Security

Your data is stored on secure servers located in the European Union by default. We implement industry-standard security measures including:

• Encryption in transit (TLS) and at rest
• Access controls and authentication
• Regular security audits
• Employee training on data protection
• Incident response procedures

For details on our security practices, see our Security page.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Typical retention periods:

• Active customer data: for the duration of your account plus 3 years
• Transaction records: 10 years (for tax and accounting compliance)
• Marketing data: until you withdraw consent
• Support communications: 3 years
• Server logs: 90 days

9. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate personal data
• Right to erasure ("right to be forgotten"): Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for consent-based processing
• Right to lodge a complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at info@7konto.com. We will respond within 30 days.

10. Cookies

Our website uses cookies to improve your experience. We use two categories: essential cookies required for the site to function, and analytics cookies (Google Analytics) that require your consent.

For a detailed breakdown of specific cookies, their purposes, and how to manage your preferences, see our dedicated Cookies Policy.

11. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with equivalent data protection standards
• Additional technical and organizational measures where necessary

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us for immediate deletion.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our website. The "Last updated" date at the top of this policy indicates when the current version became effective.

14. Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

This policy is provided in English for global accessibility. In case of conflict between language versions, the English version prevails except where local law requires otherwise.