Privacy policy
This policy describes how MVP Payments ("we", "our", "us") collects, uses and protects personal data when you visit this website, when you deal with us as a business customer, and when you pay a business through our platform.
1. Data controller
MVP Payments is the controller responsible for the personal data described in this policy. Our registered company details are published on the imprint page; questions about this policy and requests about your data go to support@mvp-payments.com.
You also have the right to complain to the data protection supervisory authority in your country of residence.
2. This website sets no cookies and no third-party trackers
This website uses no third-party analytics services, no advertising trackers and no cookies. Nothing on this site sends your visit to anyone but us.
We count visits ourselves, without identifying anyone. When a page loads, our own script tells our own servers which page was opened and the kind of place the visit came from — a search engine, another website or a direct visit — and that is added to a daily total for the page. We never receive what you searched for or the address of the page you came from; at most, the name of the website that linked to us. No record of an individual visitor is kept, no identifier is created, and nothing is written to your device. If your browser sends a Do Not Track or Global Privacy Control signal, your visit is not counted at all.
3. Personal data we collect
- If you contact us or apply for an account — your name, business contact details and the information you include in your application, including the documents business customers must provide for know-your-business checks.
- If you pay a business through our platform — the payment details (amount, currency, the recipient you are paying, the reference), which bank you chose, and — where your bank returns it — your name and account identifier as the paying account.
- Operational records — technical logs of platform activity, recorded without payment credentials and with personal identifiers kept to the minimum needed to run and secure the service. Our public sandbox demo keeps a rate-limiting counter derived from a one-way hash of the network address — the address itself is not stored, the counter is used for nothing else, and it is deleted automatically, normally within a day.
We never see or store your online banking credentials. You approve every payment with your own bank — in your banking app or on your bank's own pages — and where a bank's journey passes credentials through our systems they are forwarded to the bank in transit only: never stored, never logged.
We do not collect special categories of personal data, such as health or biometric information.
4. Why we process personal data
We process personal data to perform a contract (running a payment you asked for, or an account a business holds with us), to comply with legal obligations (including anti-money-laundering law and payment-services regulation), and for our legitimate interests in securing and improving the platform. Where we rely on consent, you can withdraw it at any time.
5. Sharing personal data
- Your bank — to initiate the payment you approved.
- The business you are paying — the outcome and details of your payment to them.
- Service providers that host and support our infrastructure, under contracts that restrict what they may do with the data.
- Regulatory and law-enforcement authorities where the law requires it.
We do not sell personal data, and we do not share it for advertising.
6. Where data is stored
Platform data is hosted in the European Union (Frankfurt, Germany), encrypted in transit and at rest.
7. Retention
Payment records are kept for as long as payment-services and anti-money-laundering law requires. Contact and application data is kept while an application or account is active and deleted when no legal reason remains to hold it.
8. Your rights
You may ask for access to your personal data, correction, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Email support@mvp-payments.com and we will respond within the statutory time limits.
9. Automated monitoring
Payments are screened by automated transaction monitoring as part of our financial crime controls. Alerts are reviewed by people — no payment of yours is declined by a machine alone. You may ask us to review any decision that significantly affects you.
10. Changes to this policy
When this policy changes, the date at the top changes with it. Significant changes affecting business customers are notified through the dashboard.