Privacy Policy

DMRKB LLC, doing business as PaymentGuardian and operating the website www.paymentguardian.io (“PaymentGuardian,” “we,” “us,” or “our”), is a Nevada limited liability company that is a business consulting platform that merges the best of all merchant services payments solutions (Credit Card, ACH, eCheck, Crypto) with an embedded AI-powered tech stack enabling our clients to best serve their customers and retain the optimal efficiency in their payment flows. We offer payment processing solutions, smart routing, chargeback protection, and DescriptorGuard (our proprietary AI-powered call intelligence technology that we provision on every merchant account).

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, apply for or use our merchant services, or utilize features such as DescriptorGuard.

We comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), the Nevada Privacy Law (NRS 603A), and other U.S. state laws where relevant. Where we process personal data of individuals in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar requirements, we also adhere to the EU General Data Protection Regulation (GDPR) and equivalent standards as applicable. By using our services, you consent to the practices described below.

1. Information We Collect

We collect two main categories of information: (a) data about our merchant clients and their owners (“Merchant Data”), and (b) data about your end customers generated through our services (“End Customer Data”).

• Merchant Data (directly from you or your representatives): Name, email, phone, business address, job title, government-issued IDs (e.g., SSN, tax ID, passport), financial/bank account details, credit information, business ownership structure, transaction history, chargeback ratios, and merchant account application details.
• End Customer Data (generated via DescriptorGuard): Phone numbers of callers to intelligent descriptor numbers, call metadata, call recordings (where enabled), AI-generated transcripts, emotion/keyword flags, chargeback-risk scores, SMS alert content, and any lead/appointment information you or your team input or store.
• Website and Technical Data (automatically): IP address, browser type/version, device information, usage data (pages viewed, clickstreams, time spent), cookies, and analytics data.
• Other: Publicly available data from third-party sources used for identity verification or fraud prevention.

We do not knowingly collect data from children under 13 and do not collect sensitive personal data (e.g., racial origin, health data) except as strictly necessary for payment processing or legal compliance.

2. How We Collect Information

• Directly: Merchant application forms, consultation requests, account setup, and service usage.
• Automatically: Cookies, analytics tools, and server logs during website visits or service use.
• From third parties: Payment processors, banks, credit agencies, or technology partners for underwriting and fraud checks.
• Via services: DescriptorGuard automatically captures call-related data when activated on your merchant accounts.

3. How We Use Information

We use information to:

• Process merchant applications, underwrite accounts, set up and manage payment processing (including smart routing and redundancy).
• Deliver DescriptorGuard features (call routing, AI transcription, real-time alerts, intelligence reporting, and 24/7 backup handling).
• Provide boutique consulting, fraud prevention, chargeback protection, and performance insights.
• Facilitate payments, manage relationships, send service updates, and (with consent) marketing communications.
• Comply with legal obligations (including national and international regulatory requirements), prevent fraud/money laundering, and enforce our Terms of Service.
• Improve our platform, conduct analytics, and personalize your experience.

4. How We Share or Disclose Information

We do not sell personal information. We share as follows:

• With payment ecosystem partners: Acquiring banks, card networks (Visa/Mastercard), processors, and regulators (U.S. federal and state authorities) to facilitate transactions, underwriting, and compliance.
• With tech/service providers (subprocessors bound by contracts): Technology partners that support call routing, SMS, AI processing, hosting, and analytics. These providers process data only on our instructions.
• For legal or safety reasons: To comply with law, court orders, or to protect rights, property, or safety (including across U.S. states and international borders where required).
• Business transfers: In mergers, acquisitions, or asset sales.
• With your consent: For marketing or other purposes you approve.

For End Customer Data processed via DescriptorGuard, you (the merchant) remain the controller and are responsible for providing notice and obtaining any required consents (e.g., via the prerecorded introduction). We act as your service provider.

5. Cookies and Tracking Technologies

We use essential and analytics cookies to operate the site, analyze usage, and improve services. You can manage cookie preferences through your browser settings. We do not use cookies for cross-site targeted advertising that would constitute a “sale” under CCPA or equivalent laws.

6. Data Security

We implement industry-standard safeguards, including encryption (SSL/TLS in transit, 256-bit where applicable), access controls, PCI DSS compliance for any cardholder data handling, and regular monitoring. While no system is infallible, we maintain strict procedures to protect your information.

7. Data Retention

We retain information only as long as necessary for the purposes outlined, legal/accounting requirements (typically 5–7 years for financial/AML records across U.S. jurisdictions), or to resolve disputes. You may request deletion (subject to exceptions).

8. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights (including under CCPA/CPRA for California residents, Nevada Privacy Law, and similar U.S. state laws):

• Right to know what personal information we collected, used, or disclosed in the past 12 months.
• Right to request deletion of your personal information.
• Right to opt out of any “sale” of data (we do not sell personal information).
• Right to non-discrimination for exercising your privacy rights.

Where GDPR or equivalent international laws apply, you may also have rights to access, rectification, erasure, restriction, portability, and objection.

Marketing Opt-Out: Unsubscribe via the link in emails or contact us. Call Data: You control End Customer Data consents; contact us for assistance.

We respond to verified requests within 45 days (or as required by law). Submit requests using the contact details below.

9. International Data Transfers

Our primary operations and servers are located in the United States (Nevada). Because we conduct business nationally across the United States and potentially internationally, personal information may be transferred to and processed in other U.S. states or outside the United States.

For transfers from the EEA, UK, or other jurisdictions with strict data protection requirements to the United States or other countries without an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses, Data Privacy Framework certification, or other legally recognized mechanisms. We ensure these transfers comply with applicable laws.

10. Changes to This Policy

We may update this Policy and will post the revised version with a new effective date. Material changes will be notified via email or website notice.

11. Contact Us

For questions, rights requests, or concerns:
DMRKB LLC d/b/a PaymentGuardian
Privacy Support Email: info@paymentguardian.io
Address: 4730 S. Fort Apache Rd. Las Vegas, NV 89147-7947
Website: www.paymentguardian.io/contact/