Privacy Policy

This policy describes how we collect, use, and share personal information across Residual Pilot sites and agent sites we host.

Information We Collect

• Agent account data: name, contact details, business information, payment method, tax information.
• Merchant application data: business details, owner identity (including government ID and, where required for underwriting, SSN/EIN and banking details), processing history, and uploaded documents.
• Usage data: device, browser, pages viewed, and interactions, including conversations with the Pilot assistant.

How We Use It

To provide and improve the Services; to route merchant applications to the applicable agent, processing partners, and underwriters; to provision domains, hosting, and email; for support, security, and legal compliance. Pilot conversations are shared with the assigned representative to service the application.

Sharing

We share information with service providers, with processing partners and sponsor banks for underwriting, and as required by law. Service-provider categories include hosting and infrastructure, customer relationship management (CRM), email and SMS/voice communications providers, AI assistant and automation vendors, payment processing, identity verification, and analytics. Information may also be transferred in connection with a merger, acquisition, financing, or sale of assets. We do not sell personal information, and we do not share it for cross-context behavioral advertising. If that ever changes we will update this policy and provide an opt-out before doing so.

SMS & Mobile Information

Mobile numbers and SMS consent are used only for the communications you have agreed to receive. Mobile information is never sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party except the messaging providers required to deliver the messages. Reply STOP to opt out at any time, or HELP for assistance; message frequency varies and message and data rates may apply.

Security & Retention

Sensitive fields are encrypted in transit and at rest; access is role-restricted. We retain information as needed for the purposes above and as required by financial-services recordkeeping obligations.

Children's Privacy

The Services are intended for individuals 18 years of age or older and are not directed to children. We do not knowingly collect personal information from anyone under 18; if we learn we have, we delete it.

International Users

The Services are operated in the United States. If you access them from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction. By using the Services you consent to such transfer where permitted by law.

Your Rights

Depending on your state, you may request access, correction, or deletion of your personal information at [email protected]. Identity verification may be required before we act on a request. California residents: see Your Privacy Choices.