Privacy Policy

We collect information you provide directly — such as when you book an audit, contact us, or sign an engagement — including your name, work email, company, store URL, and any context you share in messages.

When you visit our site we automatically collect standard log data: IP address, user agent, referrer, and pages visited. We use first-party analytics to understand traffic patterns and improve the site.

• To respond to your inquiries and deliver the services you've engaged us for.
• To send service-related communications (incident updates, audit deliverables, invoices).
• To improve our website, services, and security posture.
• To comply with legal obligations.

We do not sell your personal information. We share data only with subprocessors strictly necessary to operate (hosting, error monitoring, payment processing) and only under data-processing agreements. A current subprocessor list is available on request.

We retain inquiry data for 24 months and engagement records for the longer of (a) the contract term plus seven years, or (b) the period required by applicable tax and accounting law.

Depending on your jurisdiction (GDPR, CCPA, and similar), you may have the right to access, correct, delete, or port your personal data, and to object to certain processing. Email privacy@aspirepayments.io to exercise these rights.

We use TLS in transit, encryption at rest, principle-of-least-privilege access, and SOC 2 Type II controls inherited from Aspire Payments. No system is perfect — report a vulnerability to security@aspirepayments.io.

Aspire Commerce operates in the United States and the European Union. Where we transfer personal data across borders, we rely on Standard Contractual Clauses or equivalent safeguards.

We'll post material changes here and update the "last updated" date. Continued use of our services after changes take effect constitutes acceptance.

Questions? privacy@aspirepayments.io