Privacy Policy

1. Information We Collect

Raven collects information necessary to provide payment processing and analytics services, including:

• Transaction data and payment information
• Business contact information and account details
• Technical data for service optimization and security
• Communication records for support purposes
• Usage analytics to improve our services

2. How We Use Your Information

We use collected information to:

• Process payments and provide analytics services
• Ensure compliance with regulatory requirements
• Improve our services and customer experience
• Communicate about service updates and support
• Detect and prevent fraud and security threats
• Fulfill legal obligations and enforce our terms

3. Data Protection & Security

Raven implements comprehensive security measures including:

• End-to-end encryption for all data transmission
• Regular security audits and penetration testing
• Multi-factor authentication and access controls
• Compliance with GDPR, PCI DSS, and SOC 2 standards
• Data minimization and retention policies
• Secure data centers with 24/7 monitoring

4. Data Sharing & Third Parties

We may share your information with:

• Payment processors and financial institutions as required for transactions
• Service providers who assist in our operations under strict confidentiality agreements
• Regulatory authorities when required by law
• Professional advisors such as lawyers and auditors

We never sell your personal information to third parties for marketing purposes.

5. Your Rights

Under applicable privacy laws, you have the right to:

• Access your personal data and receive a copy
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal requirements)
• Object to processing of your data for certain purposes
• Data portability and the right to withdraw consent
• Lodge a complaint with supervisory authorities

6. Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations. Transaction data may be retained for up to 7 years for regulatory compliance, while marketing data is typically deleted within 2 years of inactivity.

7. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.

8. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@raven.com or write to us at our business address. We will respond to your request within 30 days.