Privacy Policy

Effective Date: October 31, 2025

1.0 Introduction

pmtbox Privacy Policy

Paymentbox, Inc. (DBA: pmtbox) (“pmtbox,” “we,” “our,” or “us”) is a technology company headquartered in Orem, Utah, providing payment processing, risk, and compliance solutions to businesses throughout the United States.

For more information about our services, please refer to our website: https://pmtbox.com

This Privacy Policy is applicable to Paymentbox, Inc. (DBA: pmtbox) as related to our services, which collectively include:

• The use of https://pmtbox.com and all subdomains (“website”)
• The use of our PBX platform (“application”)
• Social media messages and marketing campaigns
• The use of our products and services

This Privacy Policy sets out the essential details relating to your personal data relationship with pmtbox as:

• A website visitor
• An end user of the PBX platform (“end user”)
• A prospective client
• A job applicant
• A partner

Clients contract the use of our PBX platform and grant access to their employees and other third parties, as solely decided by them, by creating users who access the application with their email address and credentials. The clients’ administrators grant end users roles, which result in different permissions and access rights to the information held in the client account.

2.0 Personal Information We Collect

2.1 Information You Choose to Provide to Us

WHEN

We may ask you to provide personal information when:

• You use the website to download articles, data sheets, or eBooks.
• You request additional information.
• You refer business to us.
• You connect with us directly via phone calls or video conferencing platforms.
• We or client account administrators grant you access to the PBX platform.
• You or client account administrators upload or enter personal information into the platform.
• You participate in a marketing or sales promotion.
• You attend trade events and other industry networking events.
• You register or attend a webinar or other event.
• You participate in programs we may offer from time to time.
• You participate in chats.
• You pay for our services.

If you choose to provide us with a third party’s personal information (the person’s name, email, and company) when taking part in our referral program, you represent that you have the third party’s permission to do so.

WHAT

We collect personal information that may include first and last name, business email address, phone number, and/or company name.

As an end user of the PBX platform, we collect your name, business email address, and any comments or information you provide within the platform.

In addition, we may collect data uploaded by you, your employer, or other users of the platform that may be required to use pmtbox services. We expect all users to follow their organization’s privacy policy and any applicable regulatory requirements when uploading, accessing, and using personal information within our application. The data uploaded may include personal information such as:

• Employee names, email addresses, and contractual agreements
• Vendor names, email addresses, contractual agreements, or other personal data necessary for pmtbox services
• Customer names and email addresses used to provide services within the PBX platform
• Information about your business such as financial and creditworthiness
• Previous payment processing history

As a job applicant, we may also collect your resume and cover letter.

Further information, including specific obligations of pmtbox, can be found in the Service and/or Data Processing Agreements.

2.2 Information We Collect Automatically

WHEN

We collect information about your visits to the website and the PBX platform through cookies and similar tracking technology.

For further information about the types of cookies we use, please review our Cookie Policy: https://pmtbox.com/cookie-policy

WHAT

The information collected includes:

• Access times
• Pages viewed
• Links clicked
• Search terms entered
• Actions taken in connection with any of the visited pages
• Device information such as IP address, location, browser type, and language
• The URL of the website that referred you to our website and the URL you navigate to after leaving
• Information collected when you open our email messages or click on links within them

2.3 Information We May Collect from Third Parties

WHEN

We may combine the information we collect from your direct interactions with us with information obtained from other third-party sources such as credit bureaus, KYC vendors, or public databases. We may also purchase business contact lists from third parties interested in our products.

WHAT

The personal information collected includes your name, email address, business address, job title, company name, and telephone number.

3.0 How We Use Personal Information

We use your personal information to:

• Deliver the contracted services and allow full use of the PBX platform functionality as purchased by clients.
• Deliver training and support to end users.
• Communicate with you directly via emails, calls, chats, and video conferencing.
• Process payments for application subscriptions.
• Conduct credit and underwriting reviews as part of merchant onboarding.
• Comply with Know Your Customer (KYC), Anti-Money Laundering (AML), and other regulatory obligations.
• Send communications to you about:
  • New PBX features and upgrades
  • Our services and offerings
  • Event announcements
  • Product notices and policy changes
  • Promotional offers and surveys
• Advertise and market our products and services, including delivering interest-based advertisements.
• Carry out market research and improve our services.
• Create and manage marketing campaigns.
• Generate sales leads and increase market share.
• Analyze user activity to improve user experience and maximize service utilization.
• Manage our website and application to maintain and deliver contracted functionality.
• Enforce our website and application terms and/or separate contracts.
• Prevent fraud and other prohibited or illegal activities.
• Protect the security or integrity of the website, platform, our business, and services.

We may record phone or video calls for quality assurance and training purposes, with notice provided before recording.

We do not sell your personal information.

4.0 How We Share Personal Information

Our Platform and Services

If you are an end user of our PBX platform, your personal information may be viewable by other authorized users with access to the same client account.

Service Providers

We use third parties to help us provide our services. These entities will have access to your information as necessary to perform contracted tasks on our behalf. All such service providers are required by contract to protect your personal information and use it solely to deliver the contracted services.

Legal Disclosures

We may disclose personal information when required by law, subpoena, or other legal processes. When permitted, we will attempt to notify clients of such disclosures unless prohibited by law or court order.

Change in Control

We may share your personal data as part of a sale, merger, or change in control. Any acquiring entity will continue to handle your data under this Privacy Policy unless you agree otherwise.

5.0 How We Secure Personal Information

pmtbox is committed to protecting all personal information collected and used.

We employ administrative, physical, and technical safeguards consistent with recognized security frameworks, including encryption of data at rest and in transit, access controls, and audit logging. Our controls are designed to comply with standards such as PCI DSS and industry best practices.

6.0 Your Rights

We provide the same suite of privacy rights to all individuals regardless of jurisdiction. For personal information we have about you, you can:

• Access or request a copy of your personal information.
• Correct or update inaccurate information.
• Delete your personal information (subject to legal retention requirements).
• Object to the processing of your personal information for marketing purposes.
• Restrict certain processing of your personal information.
• Export your personal information in a machine-readable format.

To exercise these rights, please contact us at 877.262.6366 or [email protected].
You also have the right to lodge a complaint with the appropriate privacy authority in your jurisdiction.<

7.0 How Long We Keep Your Personal Information

We retain personal information as long as necessary to provide services, comply with legal obligations, and fulfill legitimate business purposes, including fraud prevention and dispute resolution.

Information that is no longer required may be de-identified or aggregated for analytical purposes.

8.0 Other Important Information

We process and store data only within the United States and ensure secure return, transfer, or disposal of data.

We collect and process personal data only when we have a lawful basis, including consent, performance of a contract, legal compliance, or legitimate business interest.

You may adjust communication preferences or opt out of marketing by clicking “Unsubscribe” in any marketing email or contacting us at [email protected].

9.0 Contact Information

exercise any of your rights or ask for more information about our privacy practices, contact us at:

Paymentbox, Inc. (DBA: pmtbox)
898 N 1200 W
Orem, UT 84057
Phone: 877.262.6366
Email: [email protected]

Appendix A: For Individuals Based in California

This section provides additional information for California consumers under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

A.1.1 Collection and Use of Personal Information

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, address, email, phone, etc.)
• California customer records
• Internet or network activity
• Geolocation data (general region)
• Sensory information (recorded communications)
• Professional or employment information
• Other personal information you voluntarily provide

See Section 3.0 for how we use this information.

A.1.2 Recipients of Personal Information

We may share personal information with third parties for business purposes, including service providers, financial partners, and marketing or analytics providers. See Section 4.0 for more detail.

A.1.3 California Privacy Rights

As a California resident, you may exercise the following rights (subject to verification):

• Right to Know what categories of information we collect and share
• Right to Access specific pieces of your information
• Right to Delete personal information (subject to exceptions)
• Right to Correct inaccurate information
• Right to Opt Out of sharing of personal information
• Right to Limit use of sensitive personal information
• Right to Non-Discrimination for exercising these rights

We do not sell or share personal information of consumers, including minors under 16 years of age.

A.1.4 How to Exercise Your California Rights

To exercise these rights, contact us at 877.262.6366 or [email protected]
We will verify your identity before fulfilling your request. You may designate an authorized agent to act on your behalf by providing written authorization.

If you are an employee or former employee of a pmtbox client, please direct your request to your employer.

Our services are intended for business use; we do not knowingly collect data from minors under 16.

Paymentbox, Inc. (DBA: pmtbox)
Last Updated: October 31, 2025