This Privacy Policy describes how Divpos LLC (“we,” “us”) collects, uses, and protects information when you use DivPay payment services.
Information We Collect
- Account information you provide: name, phone number, email address.
- Order information: items, branch selection, pickup time, payment status.
- Payment information: limited card metadata (last 4 digits, brand, expiry). Full card details are entered on a secure page hosted by our payment processor and are never stored on our servers.
- Device & usage information: device model, OS version, app version, in-app events (used for analytics and crash reporting only).
How We Use Your Information
- To process and deliver your orders.
- To operate the loyalty / rewards program and gamification features.
- To send transactional notifications (order ready, refund issued).
- To prevent fraud and ensure payment security.
- To send marketing messages — only if you have opted in. You can opt out at any time.
Third Parties We Share With
We do not sell your personal information.
- DivPay and its card processing partners — process your card payments under PCI DSS. Card details are encrypted and are not stored on our servers.
- Stripe — alternate card processor for some transactions. Subject to stripe.com/privacy.
- Firebase (Google) — push notifications and crash reporting.
- PostHog — anonymized product analytics.
Data Storage & Retention
- Order history is retained for 7 years to meet financial recordkeeping obligations.
- Payment tokens are stored only by the payment processor, not by us.
- Analytics events are retained for 12 months in anonymized form.
Security
When you place orders on our websites or through our mobile applications, all of your order information, including your credit card number and delivery address, is transmitted through the Internet using Secure Sockets Layer (SSL) technology. SSL technology causes your browser to encrypt your order information before transmitting it to our secure server. SSL technology, an industry standard, is designed to prevent someone other than operators of our websites from capturing and viewing your personal information.
While we use industry standard means to protect our websites and your information, the Internet is not 100% secure. The measures we use are appropriate for the type of information we collect. We cannot promise that your use of our websites or mobile applications will be completely safe. We encourage you to use caution when using the Internet. Online access to your personal information is protected with a password you select. We strongly recommend that you do not share your password and that you use unique passwords for all of your online accounts.
Your Rights
You may request access to, correction of, or deletion of your personal data by contacting info@div-pay.com. We will respond within 30 days.
Cookies & Tracking SDKs
DivPay applications use the following SDKs for product analytics and reliability:
- PostHog — anonymized in-app event analytics.
- Firebase Crashlytics — crash and error reporting.
- Firebase Cloud Messaging — push notifications.
Children's Privacy
Our services are not intended for users under 13 and we do not knowingly collect data from them.
Changes to This Policy
We may update this policy. Material changes will be announced through our services or by email.