Last updated: March 1, 2026
Brightmint Checkout (“we”, “us”) processes payments for independent businesses. This policy explains what data we collect, why we collect it and the choices you have. We never sell personal data.
Data we collect
To run your account we collect identity and business details (name, email, business registration), transaction data (amounts, methods, timestamps) and technical data (device, IP address, fraud signals). Support conversations are stored so we can follow up properly.
How we use it
Your data settles payments, pays out to your bank, screens for fraud, meets legal duties such as anti-money-laundering checks, and improves our products. Marketing emails are optional and every message carries an unsubscribe link.
Sharing and security
We share only what settlement requires: card networks, your bank and regulated compliance providers, each bound by contract. All card data lives in PCI DSS Level 1 vaults, encrypted in transit and at rest, with access limited to vetted staff.
Your rights
You may request a copy, correction or deletion of your data at any time by emailing hello@brightmintcheckout.com. We respond within 30 days. Transaction records we must keep by law are retained for seven years, then anonymised.
Contact
Questions about this policy? Write to hello@brightmintcheckout.com or 418 Mercer Street, New York, NY 10012, USA.