Privacy Policy

We collect information you provide directly: name, email address, company name, billing details, and API key metadata.

We automatically collect technical data including IP addresses, browser type, device identifiers, and usage logs when you interact with our platform.

We do not collect or store raw card numbers or full payment account details beyond what is required for billing.

To provision, secure, and operate your fhbo-card account, API keys, and integrations.

To send transactional communications (account alerts, invoices, security notices) and, with your consent, product updates.

To comply with legal obligations, detect fraud, and enforce our Terms of Service.

We use strictly necessary cookies for authentication and session management, and analytics cookies (with your consent) to improve platform performance.

You may manage cookie preferences at any time via our Cookie Settings panel or your browser settings.

We do not use cookies for cross-site advertising or sell cookie data to third parties.

We share data only with trusted sub-processors (e.g., cloud infrastructure, payment processors, analytics providers) under strict data processing agreements.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

A current list of sub-processors is available upon request at [email protected].

You have the right to access, correct, port, restrict processing of, or delete your personal data at any time.

California residents may opt out of the sale of personal information (we do not sell data) and request disclosure of data collected in the preceding 12 months.

Submit rights requests to [email protected]. We will respond within 30 days (GDPR) or 45 days (CCPA).

Account data is retained for the duration of your subscription and for 90 days after account closure, then securely deleted.

Financial and audit records are retained for 7 years as required by applicable law.

Anonymised, aggregated analytics data may be retained indefinitely.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). API keys are stored as salted hashes and never exposed in plaintext after creation.

We maintain SOC 2 Type II controls and conduct annual third-party penetration tests.

In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by GDPR Article 33.

fhbo-card is a business-to-developer platform intended solely for users aged 18 and older.

We do not knowingly collect personal data from minors. If we become aware that a minor has provided data, we will delete it promptly.

We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-platform notice at least 14 days before taking effect.

The 'Last Updated' date at the top of this page reflects the most recent revision.

The data controller is fhbo-card, Inc. For privacy inquiries, contact our Data Protection Officer at [email protected].

Mailing address: fhbo-card, Inc., 228 Park Ave S, Suite 88401, New York, NY 10003, United States.

EU residents may also lodge a complaint with their local supervisory authority.