Privacy policy

How CanvasOrbit collects, uses and protects information about you, your agents and the payments they make.

Plain words,
no surprises

Questions about your data go to [email protected]. We answer within five business days.

What we collect

Account details you give us, such as your name, work email and company. Usage data from the dashboard and API, such as request logs and the settings you change.

Payment data about the cards your agents use: amounts, merchants, times and the policy that allowed each charge.

How we use it

To run the service, keep cards within your rules, detect fraud, answer support requests and meet our legal duties as a card program. We do not sell personal data and we do not use it for advertising.

Card data

Full card numbers stay inside our PCI DSS Level 1 environment. Your agents, your servers and our own dashboard only ever handle tokens and the last four digits.

Sharing

We share data with our partner bank and the card network to process payments, and with service providers bound by contract to protect it. We disclose data to authorities only when the law requires it.

Retention

Transaction records are kept for seven years, as financial regulations require. Account data is deleted within 90 days of closing an account, unless the law says otherwise.

Your rights

You can ask to see, correct, export or delete your personal data at any time by writing to [email protected].

Cookies

This site uses a small number of cookies to keep you signed in and to understand which pages are useful. You can block them in your browser; the dashboard needs the sign-in cookie to work.