Privacy Policy
(version 2.0 dated 04.02.2026)

Asset Payments Sp. z o.o. (“we”, “us”, or “our”) operates the websites https://assetpayments.com and https://assetpayments.app and provides a business-to-business software-as-a-service platform (the “Service”).

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you use our Service, and describes your rights under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. Terms not defined here have the meanings given in our Terms and Conditions.

1. Data Controller

The data controller responsible for the processing of personal data is:

Asset Payments Sp. z o.o.
Bohaterów Warszawy 23/2
02-495 Warsaw, Poland
Email: office @ assetpayments.com

2. Definitions

Personal Data

Any information relating to an identified or identifiable natural person.

Usage Data

Data collected automatically when using the Service, such as IP address, browser type, access times, and interaction logs.

Customer Data

Business-related data submitted to the Service by our customers, including webshop orders, buyer details, cart content, and transaction-related information received via webhooks.

3. Scope of Application

This Privacy Policy applies to business users located in the European Union and Ukraine. Our Service is intended exclusively for business use (B2B) and is not offered to consumers or children.

4. Information We Collect

4.1 Account and Business Information

  • Company name
  • Business address
  • Email address
  • Telephone number
  • Account credentials

4.2 Customer and Transaction Data

Through integrations and incoming webhooks, we process webshop order data, buyer details, cart contents, and payment-related metadata for the purpose of forwarding such data to customer-selected CRM systems or third-party services.

This data is stored for a maximum period of one (1) month and is automatically deleted when the customer’s billing cycle is renewed.

4.3 Billing and Payment Information

Payments are processed via Stripe. We do not store full payment card numbers. We store limited payment-related identifiers and billing information necessary for subscription management and automatic renewal.

4.4 Usage and Technical Data

  • IP address
  • Device and browser information
  • Access logs
  • Service usage metrics

5. Legal Bases for Processing (GDPR)

We process personal data on the following legal bases:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate business interests
  • User consent (where required)

6. Use of Data

We use collected data to:

  • Provide, operate, and maintain the Service
  • Manage subscriptions and billing
  • Process and transmit Customer Data as instructed
  • Communicate with users (transactional, product, and marketing emails)
  • Improve security and performance
  • Comply with legal obligations

7. Email Communications

We use SendGrid to send transactional emails, product updates, and newsletters. Marketing communications may be unsubscribed from at any time using the link provided in the email.

8. Data Retention

Personal Data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

9. Data Transfers

Data is hosted within the European Union on Microsoft Azure infrastructure. For customers operating in Ukraine, Customer Data may be transferred to Ukrainian CRM systems selected by the customer.

All international transfers are conducted with appropriate safeguards in accordance with GDPR.

10. Disclosure of Data

We may disclose personal data:

  • To service providers acting on our behalf
  • To comply with legal obligations
  • To protect our rights, property, or security

11. Security of Data

We implement appropriate technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure.

12. User Rights

Under GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability.

Requests may be sent to office@assetpayments.com

13. Children’s Data

Our Service is intended exclusively for business users. We do not knowingly collect data from children under 18 years of age.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes become effective when published on this page.

15. Contact

If you have any questions about this Privacy Policy, please contact us at office @ assetpayments.com