Scope
This Privacy Notice explains how Pacorda, Inc. collects, uses, discloses, retains, and protects personal information associated with websites, enterprise inquiries, demonstrations, account requests, onboarding, support, business communications, and production services.
Production services are governed by the applicable customer agreement, data-processing addendum, financial-partner terms, implementation documents, and jurisdiction-specific notices. If an executed agreement conflicts with this public notice regarding customer-controlled service data, the executed agreement controls to the extent permitted by law.
Controller, business, and processor roles
For website visits, enterprise qualification, account administration, security, compliance, and its own business operations, Pacorda, Inc. generally determines why and how personal information is processed and acts as a controller, business, or similar responsible entity under applicable law.
When Pacorda processes personal information on behalf of an enterprise customer under documented instructions, the customer may be the controller or business and Pacorda, Inc. may act as processor or service provider. Vendors may act as subprocessors under written restrictions. Requests concerning customer-controlled data may need to be directed to the relevant enterprise.
Information you provide
We may receive names, business email addresses, telephone numbers, job titles, departments, employer information, company websites, countries, professional roles, payment-volume ranges, product interests, implementation requirements, support communications, event registrations, survey responses, and other information voluntarily supplied to us.
Enterprise onboarding may require additional company, beneficial-ownership, authorized-representative, counterparty, bank-account, tax, compliance, contracting, invoicing, and payment information appropriate to the requested service and applicable financial-partner requirements. This can include uploaded formation or registry records, tax-registration evidence, trade-name records, authorization resolutions or powers of attorney, bank-account ownership evidence, ownership charts, licences, and locally equivalent documents.
Registration evidence must be submitted only through the designated secure upload fields. Never submit passwords, authenticator codes, private cryptographic keys, full online-banking credentials, payment-card security codes, unnecessary government-identification images, production transaction files, or confidential third-party information unless a specifically authorized secure channel requests it.
Account, authentication, and security information
For approved accounts, we may process usernames, enterprise identity-provider identifiers, authentication status, multi-factor enrollment state, recovery events, role and permission assignments, session information, device signals, access history, administrative actions, and records needed to protect account integrity.
Passwords and authenticator secrets for production services must be handled through approved identity systems. Demonstration credentials and device-local authenticator enrollment do not create a production identity or payment authority.
Payment and financial-operation information
Depending on the service, Pacorda may process business invoices, purchase-order references, payment instructions, transaction amounts, currencies, due dates, funding and beneficiary account references, bank-confirmation data, settlement status, FX information, fees, returns, reversals, refunds, disputes, reconciliation outcomes, and audit evidence.
We limit payment information to what is reasonably necessary for Pacorda to authorize, process, monitor, settle, reconcile, support, secure, and document enterprise payments and meet contractual or legal obligations.
Compliance and verification information
Enterprise onboarding and payment operations may involve business-identity, counterparty, ownership, authorization, sanctions, fraud-risk, jurisdiction, and other compliance information. This may include beneficial-owner and control-person names, dates of birth, citizenship and residence, ownership percentages, government identification, politically exposed person declarations, source-of-funds or source-of-wealth evidence, expected transaction countries and volumes, and related records appropriate to the relationship. Such information may be obtained from the enterprise, authorized users, financial institutions, payment providers, verification vendors, public records, and permitted commercial sources.
We may use this information to assess eligibility, satisfy contractual or legal responsibilities, protect financial partners, prevent misuse, support investigations, and determine whether a transaction or account requires review, restriction, rejection, suspension, or additional verification.
Information collected automatically
When you use our websites or services, we may collect IP address, browser and device type, operating system, language, approximate location derived from IP, referring and exit pages, timestamps, pages viewed, feature interactions, performance measurements, diagnostic events, cookie identifiers, and security telemetry.
We use this information to deliver pages, maintain sessions, prevent abuse, understand service performance, support accessibility, diagnose errors, improve content, and protect Pacorda, customers, financial partners, and users.
Information from customers and third parties
Enterprise customers may provide authorized-user, counterparty, invoice, transaction, payment, support, and reconciliation information. Financial institutions and payment providers may provide account-validation, payment-status, settlement, return, fee, and compliance-related information. Integration partners may provide authorized business events and system identifiers.
We may also receive professional contact information from referrals, events, public business sources, affiliates, service providers, and individuals who ask us to contact another authorized business representative.
Purposes of processing
We may process personal information to operate and secure websites and services; respond to inquiries; qualify enterprises; provide demonstrations; create and administer accounts; verify identity and authority; process and reconcile payments; support FX and cross-border workflows; provide customer support; manage contracts and billing; communicate service and security information; improve products; prevent fraud and misuse; maintain audit records; and comply with applicable obligations.
We may also use information to establish, exercise, or defend legal claims; enforce agreements and policies; protect rights, safety, systems, and property; manage corporate transactions; and perform other purposes disclosed at collection or authorized by the relevant enterprise or individual.
Legal bases where required
Where a legal basis is required, we rely as appropriate on performance of or steps toward a contract; legitimate interests in secure enterprise payment operations, fraud prevention, customer support, service improvement, and business administration; compliance with legal obligations; consent; and protection of vital or substantial public interests where applicable.
When we rely on consent, you may withdraw it prospectively. Withdrawal does not affect prior lawful processing and may not prevent processing that is required for security, contracts, legal obligations, or legitimate interests.
How information is disclosed
We may disclose information to service providers and affiliates supporting legitimate technical, security, legal, administrative, infrastructure, communications, analytics, verification, professional, and support functions; to banks, payment networks, FX providers, and other financial partners; to authorized enterprise customers and administrators; to integration and implementation partners; to auditors, insurers, lawyers, and advisers; and to authorities or parties involved in lawful requests or disputes.
Recipients receive only information reasonably necessary for their role and are subject to applicable confidentiality, security, use, and retention restrictions. We may disclose information in connection with a merger, financing, acquisition, reorganization, insolvency, sale of assets, due diligence, or similar corporate transaction, subject to appropriate safeguards.
We do not disclose full bank-account numbers, access credentials, authenticator secrets, or sensitive payment information for unrelated advertising purposes.
Service providers and financial partners
Providers receive information only for defined services and are expected to process it under contractual, confidentiality, security, and legal restrictions appropriate to their role. Financial institutions and regulated payment partners may process information under their own legal obligations and privacy notices.
Pacorda does not control every independent financial institution’s privacy practices. Enterprises should review the notices and agreements applicable to their selected banks, payment methods, FX providers, and jurisdictions.
Sale, sharing, and targeted advertising
Pacorda does not sell personal information for monetary consideration. We do not use sensitive financial information, authentication information, or payment transaction data for cross-context behavioral advertising.
If future website technologies constitute “sale,” “sharing,” or targeted advertising under applicable law, we will provide required notices and choices before using them for that purpose. We honor legally required browser-based opt-out preference signals where applicable to the deployed technology.
Cookies and similar technologies
Essential technologies may support security, traffic routing, accessibility, fraud prevention, session continuity, and requested functionality. Optional functional or analytics technologies are used only as described in our Cookie Notice and, where required, after an appropriate choice.
Cookie preferences are device- and browser-specific. Clearing storage or using another device may require you to make the selection again.
Automated analysis and risk decisions
Pacorda may use automated rules, analytics, and risk signals to identify unusual activity, protect accounts, support transaction review, prioritize exceptions, or recommend operational actions. Material payment and account outcomes may also involve enterprise policy, provider determinations, legal requirements, and authorized human review.
Where applicable law provides rights concerning solely automated decisions with legal or similarly significant effects, we will provide required information and a mechanism to request review. Public demonstrations use synthetic outcomes and are not production decision systems.
Data retention
We retain information for periods reasonably necessary for the purposes described, including enterprise evaluation, contract performance, payment and reconciliation records, financial-partner requirements, fraud prevention, security investigations, dispute resolution, audits, legal holds, tax and accounting obligations, and enforcement of agreements.
Retention depends on the information category, sensitivity, transaction status, customer instructions, jurisdiction, contractual commitments, and whether information is needed to establish or defend legal claims. When retention is no longer justified, information is deleted, de-identified, or securely isolated in accordance with applicable requirements.
Security and incident response
We use administrative, technical, and organizational measures designed for the sensitivity and consequence of enterprise payment information. Measures may address access governance, encryption, monitoring, secure development, vulnerability management, vendor risk, business continuity, incident response, and reviewable records without publishing operational detail that could weaken protection.
Registration documents are stored separately from ordinary website content using non-public object identifiers, integrity hashes, restricted metadata, and an initial quarantine status for compliance review. Pacorda does not include uploaded evidence as an email attachment or expose a public document URL. Access, malware scanning, review, retention, and deletion controls remain subject to Pacorda's production policies and applicable provider capabilities.
No system, network, transmission, or storage method is guaranteed to be completely secure. Users and enterprise customers remain responsible for protecting devices, credentials, identity-provider accounts, authorized-user lists, approval policies, and internal systems under their control.
If an incident affects information and notification is required, we will provide notice to affected customers, individuals, regulators, or other parties in the manner and timeframe required by applicable law and contracts.
International transfers
Pacorda and its providers may process information in the United States and other countries where operations or service providers are located. Those jurisdictions may have privacy laws different from the jurisdiction where information originated.
Where required, we use recognized transfer mechanisms and supplementary safeguards, which may include adequacy decisions, standard contractual clauses, contractual commitments, transfer assessments, or other lawful mechanisms. Enterprise customers may request additional transfer information through their contracting contact.
Privacy rights and choices
Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, restriction, objection, information about processing, withdrawal of consent, or review of certain automated decisions. Some rights are subject to identity verification, legal exceptions, security limitations, financial-record requirements, and the rights of other parties.
We will not discriminate against an individual for exercising an applicable privacy right. Authorized agents must provide appropriate proof of authority, and we may verify requests directly with the individual.
United States state privacy disclosures
Residents of California and other states with comprehensive privacy laws may have rights concerning categories and specific pieces of personal information, correction, deletion, portability, opt-out of certain sale, sharing, or targeted advertising, limitation of certain sensitive-information uses, and appeal of denied requests, subject to statutory scope and exceptions.
The categories described throughout this notice may include identifiers; professional information; commercial and transaction information; internet or electronic activity; approximate geolocation; financial information; account and authentication information; compliance information; and inferences used for security or service operations. Sources, purposes, disclosures, and retention considerations are described in the corresponding sections above.
EEA, United Kingdom, and Switzerland
Individuals in these jurisdictions may contact us about access, rectification, erasure, restriction, portability, objection, consent withdrawal, and applicable automated-decision rights. They may also complain to their local supervisory authority.
Where Pacorda, Inc. acts only as a processor for an enterprise, we may direct the request to the enterprise controller. We may retain or continue processing information when permitted or required for contracts, security, legal claims, financial records, compliance, or compelling legitimate grounds.
Children and consumer use
Pacorda is designed for authorized representatives of enterprises and is not directed to children. We do not knowingly solicit personal information from children for website accounts or payment services. If you believe a child submitted information, contact us so we can review and take appropriate action.
Pacorda’s enterprise services are not intended to function as a consumer deposit account, personal wallet, or consumer remittance product through this website.
Customer responsibilities
Enterprise customers are responsible for having authority and a lawful basis to provide personal information to Pacorda; delivering required notices to their personnel, customers, suppliers, and counterparties; configuring user roles and approvals; maintaining accurate authorized-user and payment information; and responding to privacy requests for data they control.
Customers must not use Pacorda to collect information that is unnecessary, unlawful, deceptive, or inconsistent with their agreements and our Acceptable Use Policy.
Changes to this notice
We may update this notice to reflect product, provider, legal, operational, or organizational changes. The updated date will appear at the top. Material changes will be communicated through a reasonable channel when required.
Archived or customer-specific versions may be available through the applicable enterprise agreement or contracting contact.
Contact, requests, and appeals
Privacy questions, rights requests, and appeals may be sent to [email protected]. Pacorda, Inc. is the entity responsible for responding unless the request concerns customer-controlled data or an independent financial provider. Security vulnerabilities should be reported through the Responsible Disclosure page. Enterprise customers may also contact their designated Pacorda representative.
Please identify your jurisdiction, relationship to Pacorda, the relevant enterprise, and the right you wish to exercise. We may verify identity and authority proportionately before responding. Do not include passwords, authenticator codes, full bank credentials, or unnecessary sensitive information.
