Privacy Policy

Effective date: January 7, 2026

Hyfin ("Hyfin", “us”, “we”, or “our”) operates https://hyfin.com and the mobile application (hereinafter referred to as the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of Personal Data when you use our Service and the choices you have associated with that data.

Hyfin provides various services to our business customers, which include processing online payments for those business customers. When acting as a service provider (also referred to as a data processor) to our business customers, we process Personal Data received from that relationship in accordance with our agreement with the business customer and the business customer’s lawful instructions.

How We Collect Personal Data

We collect Personal Data from you in various ways:

  • Directly from you: We collect Personal Data that you provide to us directly, for example, if you choose to contact us, request information from us, sign up to receive updates, or otherwise utilize our Service.
  • From third parties: We may collect Personal Data from third parties, including but not limited to business customers, business partners, advertising networks, social networks, data analytics providers, mobile device providers, and Internet or mobile service providers.
  • Through online tracking technologies: We use cookies and similar technologies to collect Personal Data automatically as you navigate our Site. For additional information regarding our use of these technologies, see the Cookies and Tracking Technologies section below.

Types of Personal Data Collected

While using our Service, we may ask you to provide us with certain information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you (“Personal Data”). Personal Data may include, but is not limited to:

  • Contact Information: If you submit an inquiry, register for an account, or provide information on or through our Service, we may collect your contact information including your name, mailing address, email address, and phone number.
  • Commercial Information: If you submit an inquiry, request a demo, or provide information through our website, we may collect commercial information including information about our offerings that you have shown interest in.
  • Communication Information: We may collect Personal Data contained within your communications with us via email, chat functionality, social media, telephone, or otherwise, and in certain cases we may use third-party service providers to do so. Where permitted by applicable law, we may collect and maintain records of calls and chats with our agents, representatives, or employees via message, chat, post, or similar functionality.
  • Usage Data: We may also collect Personal Data that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device (“Usage Data”). This Usage Data may include Personal Data such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. When you access the Service with a mobile device, this Usage Data may include Personal Data such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track Personal Data and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. You can learn more how to manage cookies in the Browser Cookies Guide .

Website Analytics: We use analytics services, that use cookies and other technologies that collect your Personal Data, to assist us with analyzing the traffic and usage of our Service and to optimize, maintain, and secure our Service and inform subsequent business decisions (including, e.g., advertising). These include, but are not limited to, the following third-party services:

Interest-Based Advertising: We may also allow or enable third parties to collect Personal Data to provide their interest-based advertising on behalf of our products and services, or their own. Interest-based advertising occurs when advertisements are shown to you based on information collected from your online interactions over time and across multiple websites, devices, or online services that you visit or use. Some companies may engage in cross-context behavioral advertising to predict your preferences and show you advertisements that are most likely to be of interest or relevant to you. We do not control these third parties' collection or use of your information for these purposes, or the opt-out options they may individually offer you via their terms, conditions, and privacy policies. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. Examples of the third-party service providers we engage to serve interest-based advertisements include Google Ads (including Google Tag).

Use of Data

Hyfin uses the collected data for various purposes:

  1. To provide, maintain, and improve the Service
  2. To notify you about changes to our Service
  3. To allow you to participate in interactive features of our Service when you choose to do so
  4. To provide customer care and support
  5. To provide analysis or valuable information so that we can improve the Service
  6. To monitor the usage of the Service
  7. To detect, prevent and address technical issues
  8. For marketing and advertising, including using your information to send you messages, notices, newsletters, surveys, or promotions
  9. As part of a corporate transaction, such as in connection with the sale of part or all of our assets or business, the acquisition of part or all of another business or another business’ assets, or another corporate transaction, including bankruptcy.

Transfer Of Data

Your Personal Data may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there.

Hyfin will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other Personal Data.

Disclosure Of Data

Legal Requirements

Hyfin may disclose your Personal Data in the following circumstances:

  • Affiliates and Subsidiaries: We may share Personal Data within our family of companies for their and our business and marketing purposes, including providing you with information about the Service we think may be of interest to you.
  • Service Providers: We disclose your Personal Data with the service providers that we use to support our business, including but not limited to, data analytics providers, website hosting providers, and other technology providers.
  • Business Partners: We may disclose Personal Data with trusted business partners. For example, we may disclose your Personal Data with a company whose products or services we think may be of interest to you or who we co-sponsor a promotion or service with.
  • Ad Tech Companies and Other Providers: We may share or make available limited Personal Data (such as a mobile device identifiers) with ad tech companies and other online service providers. When we share your Personal Data in this context, we follow applicable legal requirements, which may require that we provide opt-out rights or other individual rights.
  • Legal Obligation or Safety Reasons: We may disclose Personal Data to a third party when we have a good faith belief that such disclosure of Personal Data is reasonably necessary to (a) satisfy or comply with any requirement of law, regulation, legal process, or enforceable governmental request, (b) enforce or investigate a potential violation of any agreement you have with us, (c) detect, prevent, or otherwise respond to fraud, security or technical concerns, (d) support auditing and compliance functions, or (e) protect the rights, property, or safety of Hyfin, its employees and clients, or the public against harm.
  • Merger or Change of Control: We may disclose Personal Data to third parties as necessary if we are involved in a merger, acquisition, or any other transaction involving a change of control in our business, including but not limited to, a bankruptcy or similar proceeding. Where legally required, we will give you notice prior to such disclosure.
  • Other: We may disclose Personal Data to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Data to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).

Your Privacy Rights

Depending on where you live, you may have the right to exercise certain controls and choices, such as the ability to access, correct, or delete your Personal Data or opt out of certain processing regarding your Personal Data. If you believe you may have the right to exercise certain controls and choices, please submit a request to jbanks@hyfin.app. Please note that we may need to verify your identity before considering a request and that we may deny certain requests, or only fulfill some in part, as permitted or required by law.

To opt out of marketing emails, please email us at jbanks@hyfin.app or by following the instructions included in the email or text correspondence. Please note that, even if you unsubscribe from certain correspondence, we may still need to contact you with important transactional or administrative information, as permitted by law.

You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Privacy Policy. However, should you withdraw your consent or object to processing of your Personal Data, or if you choose not to provide certain Personal Data, we may be unable to provide some, or all, of our Services to you.

We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

Retention of Data

We retain your Personal Data for as long as needed: (a) to conduct business with you; (b) fulfill the purposes outlined in this policy; and (c) to comply with our legal obligations, resolve disputes, and enforce any agreements.

Criteria we will use to determine how long to retain your Personal Data include the nature and length of our business relationship with you; our legal rights, obligations, and retention requirements; and if we have an ongoing business purpose for retaining your Personal Data, such as communicating with you about ongoing or prospective services you requested.

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

Our Services are not directed towards anyone under the age of 18 (“Children”).

We do not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that Personal Data from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.