Privacy Policy

This policy describes how we collect, use, and share personal information across Residual Pilot sites and agent sites we host.

Information We Collect

• Agent account data: name, contact details, business information, payment method, tax information.
• Merchant application data: business details, owner identity (including government ID and, where required for underwriting, SSN/EIN and banking details), processing history, and uploaded documents.
• Usage data: device, browser, pages viewed, and interactions, including conversations with the Pilot assistant.

How We Use It

To provide and improve the Services; to route merchant applications to the applicable agent, processing partners, and underwriters; to provision domains, hosting, and email; for support, security, and legal compliance. Pilot conversations are shared with the assigned representative to service the application.

Sharing

We share information with service providers, with processing partners and sponsor banks for underwriting, and as required by law. Service-provider categories include hosting and infrastructure, customer relationship management (CRM), email and SMS/voice communications providers, AI assistant and automation vendors, payment processing, identity verification, and analytics. Information may also be transferred in connection with a merger, acquisition, financing, or sale of assets. We do not sell personal information, and we do not share it for cross-context behavioral advertising. If that ever changes we will update this policy and provide an opt-out before doing so.

SMS & Mobile Information

Mobile numbers and SMS consent are used only for the communications you have agreed to receive. Mobile information is not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes; it is shared only with the providers that deliver our messages, and only for that purpose. You may opt out of SMS communications at any time by replying STOP; message and data rates may apply and message frequency varies.

Security & Retention

Sensitive fields are encrypted in transit and at rest; access is role-restricted. We retain information as needed for the purposes above and as required by financial-services recordkeeping obligations.

Children's Privacy

Our services are not directed to individuals under 13 years of age, and we do not knowingly collect personal information from children.

International Users

If you access our services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the services, you consent to such transfers where permitted by law.

Your Rights

Depending on your state, you may request access, correction, or deletion of your personal information at [email protected]. California residents: see Your Privacy Choices.