Privacy Policy

SCOPE OF OUR PRIVACY POLICY

This Privacy Policy (“Privacy Policy”) is designed to help you understand how AVENDO, LLC and its affiliates (“Avendo,” “we,” “us,” or “our”) collect, use, and share your personal information (“Personal Information”) and to help you understand and exercise your privacy rights.

This Privacy Policy applies to Personal Information processed by Avendo through our website (https://www.avendo.tech/), our mobile and web applications, and our related products, features, offerings, promotions, and support (collectively, our “Services”). [Certain products, features, or programs may be subject to separate or supplemental privacy notices. If those notices conflict with this Privacy Policy, the supplemental notice will control for that specific product or feature.]

Avendo may act as a “business” or “data controller” when we determine the purposes and means of processing Personal Information (for example, when you create an account, interact with our HUB, or receive marketing communications from us). In some cases, Avendo may also act as a “service provider” or “data processor” when we process Personal Information on behalf of a merchant, processor, or other partner.

We reserve the right to modify or amend this Privacy Policy from time to time to reflect changes to our Services, industry practices, or applicable legal requirements. When required by law, we will provide prior notice of material changes (for example, by posting on our website or by notifying you at the email address associated with your account). Your continued use of our Services after such changes become effective means you accept the updated Privacy Policy.

DEFINITIONS

“Personal information” means any information that identifies, relates to, or could reasonably be linked to an individual or their household. This includes things like your name, email, business contact details, IP address, or device identifiers. It does not include de-identified or aggregated data that cannot reasonably be used to identify you.

“Business Information” means information related to a business entity or commercial activity, including but not limited to business name, ownership information, entity type, industry classification, contact details, financial or operational information, and other data provided in connection with onboarding or account management.

“Services” means Avendo’s website https://www.avendo.tech/, mobile and web applications, and all related products, promotions, advertisements, features, offerings, technologies, integrations, and support provided by Avendo.

“Merchant” means a business or individual that uses our Services to compare, route, or process payments.

“Partners” means third-parties with whom Avendo collaborates in providing or supporting the Services, including but not limited to payment processors, acquiring banks, tokenization vaults, independent sales organizations, referral partners, and integration partners.

“Service Providers” means third-party contractors, vendors, or other companies engaged by Avendo to perform Services on its behalf, such as cloud hosting, IT support, identity verification, customer service, analytics, or marketing support.

“Third-Party Providers” means external platforms, applications, or accounts that a user may choose to link or integrate with the Services, such as accounting software, e-commerce platforms, or other business tools, which may share data with Avendo at the user’s direction.

“Sell” under California law is defined as the disclosure of Personal Information to third parties in exchange for monetary or other valuable consideration.

INFORMATION WE COLLECT ABOUT YOU

We may collect the following categories of Personal Information when you interact with Avendo, apply for or use our Services, or communicate with us:

Personal identifiers. Avendo may collect Personal Information such as your name, business name, residential or business address, email address, telephone number, date of birth, government-issued identification numbers (such as tax identification, employer identification, or social security number, as permitted by law), and account login credentials.

Business identifiers. We may collect details about your business, including your legal business name, any “doing business as” names, type of business entity, industry classification, website or online presence, contact information, governing documents, and information about the goods or services you offer. We may also collect financial and operational information about your business, such as bank account details, settlement instructions, processor or account statements, compliance certificates, and other documentation relevant to onboarding or supporting your business relationship with us.

Transaction information. We may collect purchase history, transaction amounts, processor routing details, response codes, settlement records, and related information generated through use of our Services.

Device and technical information. We may collect your IP address, browser type and version, operating system, device identifiers, cookie preferences, language settings, time zone, screen resolution, and similar information automatically collected through cookies or other tracking technologies when you access our Services.

Geolocation information. We may collect approximate geolocation (for example, based on your IP address or Wi-Fi/cell triangulation) or precise location information (for example, through GPS settings on your mobile device) when enabled by you.

Internet or network activity. We may collect information such as your interactions with our websites, applications, and emails; pages visited; links clicked; time and date of visits; usage statistics; referral URLs; and diagnostic data related to performance or errors.

Audio, visual, or similar information. We may collect information such as call recordings or chat transcripts with our customer support team.

Biometric. When you consent in the user experience, we collect voice identification, photo identification, or face scans to verify your identity and authenticate you for certain actions related to your account, including, for example, verify your identity and authenticate you to meet regulatory requirements or before you access accounts and Services.

External Data. We may collect information about you from third parties (“External Data”). We use External Data to confirm your identity and your eligibility to use our Services, to ensure your lawful use of our Services, to operate our loss prevention measures, and to protect your data and our Services from potential fraudulent or illegal activity such as: type of external data, background check information, credit reports, identity verification information (which may include biometrics), information about parties with whom you have or may have a financial or corporate relationship, credit and tax bureau reporting, matches and potential matches with government watchlists, financial and employment information, corporate database reports.

INFORMATION WE COLLECT FROM THIRD PARTIES

Information from third parties. We may receive information about you and your business from third parties that are involved in providing or supporting our Services. These may include payment processors, acquiring banks, vault providers, independent sales organizations, Service Providers, business partners, or publicly available sources. Information from these sources may include account details, compliance records, transaction-related information, and verification data.

Third-Party Providers. The Services may give you the option to link your accounts on third party platforms or use those platforms via our Services (collectively, “Third-Party Providers”) and we may import relevant Personal Information from those Third-Party Providers. This linking is entirely optional and subject to the consent you provide to either us or to the Third-Party Provider but may enable a richer and more effective user experience. If you do link such accounts, you acknowledge and agree that we, via the Services, will receive Personal Information from such Third-Party Providers.

Please note that once you engage with a Partner or Third-Party Provider (for example, by linking your account, accepting an offer, or using their tools), your Personal Information may also be subject to their own privacy policies and practices. Avendo is not responsible for the independent privacy practices of such third parties, and we encourage you to review their privacy policies carefully.

INFORMATION WE USE

We may use the information we collect, including Personal Information and Business Information, for legitimate business purposes as permitted by law. The purposes for which we may use information include, but are not limited to:

To provide and maintain our Services. This includes enabling payment processing, account setup, system functionality, and ongoing support.

To manage your account. Information you provide allows us to verify your identity, authenticate your access, and offer you the features available to registered users.

To comply with contracts and legal obligations. We use information as necessary to meet our contractual commitments to you, our processors, and other Partners, and to comply with applicable law and industry standards.

Fraud prevention and risk management. We may conduct fraud screening, compliance checks, and risk analysis in connection with your use of our Services, and to protect against financial crime, unauthorized activity, or violations of applicable network rules.

Connect third-party accounts. Where you choose to link external accounts or platforms (such as e-commerce carts, accounting software, or other integrations), we may use your information to enable that connection and provide the functionality you request.

To communicate with you. We may contact you by email, telephone, or other means to provide updates, security alerts, customer support, and important account notices.

To improve our Services. We may analyze information to understand how our Services are used, to enhance performance, to develop new features, and to improve security.

For marketing and engagement. Where permitted by law, we may provide information about features, offers, and services similar to those you already use, and you may opt out at any time.

For business transactions. If Avendo undergoes a merger, acquisition, restructuring, or similar event, your information may be transferred as part of that process.

For other internal purposes. This may include data analysis, research, testing, audits, and enforcement of our agreements.

HOW WE DISCLOSE YOUR INFORMATION

We may disclose Personal Information and Business Information in connection with providing our Services and operating our business. Disclosures may include the following circumstances:

To provide and operate our services. We may disclose your information with processors, acquiring banks, tokenization vaults, independent sales organizations, and other Partners that are directly involved in facilitating transactions, onboarding merchants, or providing integrations you have requested.

To our Service Providers. We may share information with vendors and contractors that operate at our direction and on our behalf to support our Services. This may include providers of hosting, IT support, analytics, fraud prevention, identity verification, customer service platforms, communications, and marketing support. These Service Providers are contractually required to use Personal Information only as necessary to perform services for us.

To our Partners. Where you choose to engage with a Partner through the Avendo platform, we may disclose the necessary information to that Partner and their service providers in order to fulfill your request or facilitate your transactions. Information disclosed to Partners is subject to their own privacy policies.

For fraud prevention and compliance. We may disclose information to assist us in detecting activities suggestive of fraud.

Necessary disclosures to protect Avendo or others. We may access, preserve, and disclose Personal Information if we, in good faith, believe it is necessary to: comply with applicable laws, regulations, or valid legal processes such as subpoenas or court orders; meet obligations under financial crime, anti-money laundering, or fraud prevention regulations; protect the rights, property, or safety of Avendo, our Merchants, partners, or others; enforce our policies, contracts, or agreements; collect amounts owed to us; or support an investigation or prosecution of suspected illegal activity.

Avendo affiliates. We may disclose information to Avendo’s affiliates, subsidiaries, or other companies under common ownership or control. These entities will use your information in accordance with this Privacy Policy and only for the purposes described herein.

In business transactions. If Avendo undergoes a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other business transition, Personal Information and Business Information may be disclosed or transferred as part of that transaction, including during due diligence.

Other disclosures. We may disclose your information for other purposes where permitted by law, with your consent, or as you direct us. your Personal Information may also be subject to third-party privacy policies and practices. Avendo is not responsible for the independent privacy practices of such third parties, and we encourage you to review their privacy policies carefully.

Aggregated and de-identified information. We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for analytics, research, or other lawful purposes.

DATA RETENTION

We retain Personal Information and Business Information for as long as necessary to provide our Services, to comply with legal and regulatory obligations, to resolve disputes, to enforce our agreements, and for other legitimate business purposes. The length of time we keep information depends on the type of information and the purposes for which it is collected and used.

Information provided during the account registration and onboarding process, such as business details, ownership information, and identity verification records, may be retained for as long as your account remains active and for a period after closure as required by law, regulation, or card network rules.

When information is no longer needed for any of the purposes described above, we take steps to securely delete or de-identify it in accordance with our internal policies and applicable law.

COOKIES AND TRACKING TECHNOLOGIES

When you use our Services, certain information is collected automatically. This may include details such as your Internet Protocol (IP) address, browser type and version, device type and settings, operating system, the pages you visit, the time and date of your visit, the amount of time spent on those pages, and other diagnostic or usage data. When you access our Services through a mobile device, we may collect additional information such as the type of device, unique device identifiers, mobile operating system, and mobile browser information.

We and certain Partners and third-party advertising or analytics providers use cookies and similar tracking technologies to recognize you, improve your experience, and analyze how our Services are used. Cookies are small files that can be used to track a user’s steps or automatically generate a user’s password. Tracking technologies may include cookies, pixel tags, beacons, scripts, and other similar tools. These technologies help us to keep you signed in, remember your preferences, understand usage patterns, measure the effectiveness of communications, and maintain system security and integrity.

Cookies are stored on your hard drive, not on our platform or website. Most cookies are automatically deleted at the end of a session. You may decline our cookies if your browser permits, although your use of our platform and website may then be restricted.

If you wish to delete cookies from your machine, you may consult your browser’s help files for instructions on how to do so.

SECURITY OF YOUR INFORMATION

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. We have taken commercially reasonable safeguards designed to keep your Personal Information protected and require our Service Providers and Partners to have appropriate safeguards as well. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

By using our Services or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Services. Your Personal Information may be accessible by our employees, contractors, business partners, and Service Providers who require access solely for the purposes described in this Privacy Policy.

PRIVACY RIGHTS FOR CALIFORNIA RESIDENTS

California law provides California residents with certain additional protections regarding “Personal Information.” For purposes of this section alone, “Personal Information” means any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

We collect the categories of Personal Information described in the “Information We Collect” section of this Privacy Policy.

California residents may have the following rights:

• The right to request information regarding the Personal Information we have collected in the past 12 months, including the categories of Personal Information, the categories of sources, and the purposes for which we collected it.
• The right to request information regarding whether we have disclosed Personal Information to third parties in the past 12 months, and if so, the categories of Personal Information and the categories of third parties.
• The right to request and receive a copy of your Personal Information collected in the past 12 months.
• The right to request deletion of your Personal Information, subject to certain exceptions.
• The right to request specific treatment of “Sensitive Personal Information” as defined under California law.
• The right to opt out of the “sharing” of Personal Information.
• The right not to be discriminated against for exercising any of these rights.

Avendo does not sell Personal Information but may share Personal Information as that term is defined under California law for purposes of cross-context behavioral advertising. You may opt out of such sharing as described below.

If you are a California resident, you may exercise your rights described above by contacting us at alexp@avendo.tech. We may need to verify your identity which may require us to request additional information, such as confirming details we already hold about you or asking for documentation. If you use an authorized agent to submit a request on your behalf, we may require proof of your authorization and may still ask you to verify your identity directly.

PRIVACY RIGHTS FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA

If you are a natural person residing within the European Economic Area (“EEA”), or if your Personal Information is processed by us on behalf of a controller residing in the EEA (a “Data Subject”), the EU General Data Protection Regulation (“GDPR”) provides you with certain rights and requires us to explain the lawful bases on which we process your Personal Information (“Personal Data”).

Avendo takes reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to know what Personal Data we hold about you, or if you want it removed from our systems, please contact us using the details provided in this Privacy Policy. If we process Personal Data on behalf of a Merchant or other controller, you may need to contact that controller directly to exercise your rights.

Where Avendo acts as the data controller, you have the following rights under GDPR:

• Access. Request access to your Personal Data (a “Data Subject access request”). This enables you to receive a copy of the Personal Data we hold about you and confirm that we are lawfully processing it.
• Correction. Request correction of inaccurate or incomplete Personal Data.
• Erasure. Request deletion of your Personal Data where there is no lawful reason for us to continue processing it, where you object to processing, where processing was unlawful, or where erasure is required by law. Certain exceptions may apply.
• Objection. Object to processing of your Personal Data where we rely on legitimate interests (including profiling), or where we process your Personal Data for direct marketing purposes.
• Restriction. Request restriction of processing of your Personal Data in limited circumstances, such as while the accuracy of data is being verified, where processing is unlawful, or where you contest our legitimate interests.
• Portability. Request the transfer of your Personal Data to you or a third party in a structured, commonly used, machine-readable format, where technically feasible.
• Withdraw consent. Withdraw consent at any time where we rely on your consent to process Personal Data. This does not affect the lawfulness of processing carried out before withdrawal.

We may ask you to verify your identity before responding to such requests.

Avendo may process your Personal Data under the following legal bases:

• Consent. Where you have given consent for specific purposes.
• Contract. Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.
• Legal obligation. Where processing is necessary to comply with legal or regulatory obligations.
• Legitimate interests. Where processing is necessary for Avendo’s legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Vital interests. Where processing is necessary to protect your vital interests or those of another natural person.

Automated decision-making and profiling. Avendo may use automated processes, including profiling, to support fraud detection, compliance reviews, product improvements, or marketing efforts. If automated decision-making produces legal effects concerning you or significantly affects you, you have the right to: Obtain human intervention, express your point of view, contest the decision; and receive an explanation of the decision and its underlying logic.

Cross-border data transfers. Your Personal Data may be transferred to, stored, and processed in the United States and other countries where Avendo or its Service Providers operate. To safeguard such transfers, Avendo relies on the European Union’s Standard Contractual Clauses and other lawful mechanisms to ensure compliance with GDPR.

Lodging a Complaint with a Data Protection Authority. If you believe that our use of your Personal Data infringes upon the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where the alleged infringement occurred. To find the contact information for your local Data Protection Authority, please see the following link: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

INTERNATIONAL DATA TRANSFERS

All information processed by us may be processed and stored anywhere in the world, including, but not limited to, Canada, the United States or other countries, which may have data protection laws that are different from the laws where you live. If you use our Services, you consent to the transfer and processing of your information from any country to any other country in accordance with this Privacy Policy.

OTHER STATE LAWS

Residents of certain U.S. states, including Colorado, Connecticut, Virginia, Texas, and Florida, may have additional rights they may exercise with respect to their Personal Information. 

CHILDREN’S PRIVACY POLICY

Avendo does not address anyone under the age of 13. We do not knowingly collect, share, or sell Personal Information from anyone under the age of 13. If we become aware that we have collected Personal Information from anyone under the age of 13 without verification of parental consent, we will take steps to delete that information within a reasonable time.

YOUR PRIVACY CHOICES AND RIGHTS

Depending on where you reside, you may have certain rights over your Personal Information. Avendo respects these rights and provides you with choices about how your information is collected, used, and shared.

Access and portability. You may have the right to request access to the Personal Information we hold about you if you have a direct relationship with Avendo, and to receive a copy of that information. 

Correction. You may request that we correct or update inaccurate or incomplete Personal Information we maintain about you.

Deletion. You may request that we delete your Personal Information, subject to certain exceptions, such as where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

Opt-out of marketing. You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in those communications or by contacting us directly. Even if you opt out of marketing, we may still send you non-promotional messages relating to your account or our ongoing business relationship.

Limit use and disclosure of sensitive information. If applicable under law, you may request that we limit our use and disclosure of certain categories of sensitive information.

Non-discrimination. We will not discriminate against you for exercising any of your privacy rights, such as by denying Services, charging different prices, or providing a different level of service.

LINKS TO OTHER WEBSITES

Our service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third-party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

CONTACT US

Questions regarding this Privacy Policy, please contact us at alexp@avendo.tech. We may need to verify your identity before fulfilling your request, which could involve confirming information already in our records or requesting additional details. If you choose to use an authorized agent to submit a request on your behalf, we may require proof of authorization and identity.

Avendo fees

Avendo is compensated through the following fee:

Description	Fee Details
Avendo Services Fee	10¢ per transaction – billed to payment processor

Who is Avendo Compensated By?

The Avendo Services Fee is handled directly between Avendo and the Payment Processors, so you will never receive a bill or direct charge from Avendo.

Avendo never bills merchants. There are no Avendo invoices, no monthly charges, and no separate platform fees assesed by Avendo. Our compensation is handled directly between Avendo and each Payment Processor.

Card-network interchange rates and assessment fees are set by Visa®, Mastercard®, American Express®, and Discover®. These rates apply to all merchants and are charged by your Payment Processor, not by Avendo. Avendo’s role is to help you access the best available processor rates for each transaction.


Here’s our promise to you: clear pricing, honest communication, and a goal of helping your business keep more of its revenue on every transaction.

Avendo and Chargebacks

A chargeback occurs when a cardholder disputes a transaction with their bank or card issuer. The bank temporarily reverses the payment and withdraws funds from your account while the dispute is reviewed. Chargebacks can happen when a transaction is incorrect, unauthorized, duplicated, or when the customer is dissatisfied with the product or service received.

Avendo does not decide or control the outcome of chargebacks. Who does? Each dispute is handled by our payment processors. Avendo ensures the process is centralized, transparent, and easy to manage from a single dashboard.

Through Avendo’s dashboard, you are directly connected to payment processors for all chargeback and dispute activity.