Privacy Policy

Last updated: June 2025

1. Who We Are

Paynorama is a SaaS platform operated by Marouen Bachoual. For any privacy-related queries, contact us at contact@paynorama.io.

2. Data We Collect

We collect the following types of data:

  • Account data: name, email address, password (hashed)
  • Usage data: pages visited, features used, session duration
  • Payment data: billing information processed by our payment provider (we do not store card details)
  • Content data: payment routes, flows, and documents you create within the platform

3. How We Use Your Data

  • To provide and maintain the Service
  • To process your subscription and billing
  • To send transactional emails (account confirmation, password reset)
  • To improve the Service through aggregated analytics
  • To comply with legal obligations

4. Legal Basis for Processing

We process your data on the following legal bases: (a) performance of a contract when you subscribe to our Service; (b) legitimate interests for analytics and security; (c) compliance with legal obligations.

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your data is permanently removed within 30 days, except where retention is required by law.

6. Data Sharing

We do not sell or rent your personal data. We may share data with trusted third-party service providers strictly necessary to operate the Service (hosting, email, payments), all bound by data processing agreements.

7. Data Storage & Security

Your data is stored on European servers and encrypted using AES-256 at rest and TLS in transit. We implement industry-standard security measures to protect your information.

8. Your Rights

Under applicable law, you have the right to: access your data, correct inaccuracies, request deletion, restrict processing, and data portability. To exercise these rights, contact us at contact@paynorama.io.

9. Cookies

We only use essential cookies for authentication and session management. Our analytics (Umami, self-hosted in the EU) is cookieless: it collects aggregated, anonymous usage statistics and never tracks you across sites.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or via an in-app notice.