Celer Merchants Corporation

Privacy Policy

Effective Date: August 19, 2025

Scope

This Privacy Policy (“Policy”) describes how Celer Merchants Corporation and its subsidiaries/affiliates (“Celer Merchants,” “we,” “us,” or “our”) collect, use, disclose, and protect personal information in the United States when you visit our websites, use our products and services, interact with us online or offline, or otherwise engage with Celer Merchants (collectively, the “Services”).

This Policy also explains your privacy rights under applicable U.S. laws and how to exercise them.

1) Notice at Collection (CCPA/CPRA)

Categories of Personal Information We Collect; Purposes; Retention; Disclosures

Category (examples)	Sources	Business/Commercial Purposes	Retention (criteria/typical period)	Disclosed to (categories)	Sold/Shared for Targeted Ads?*
Identifiers (name, email, phone, IP, device IDs)	You; your devices; our service providers	Account creation; customer support; fraud prevention; security; analytics; marketing (with consent where required)	As long as needed for the purpose collected, then archived or deleted under our schedule (typically account life + up to 7 years for compliance)	Cloud/hosting, analytics, security, customer support vendors; affiliates	We do not sell for money; we may share limited identifiers with advertising/analytics partners unless you opt out
Customer Records (billing address; limited payment info***)	You; payment processors	Transaction processing; order management; financial reporting; chargeback handling	Statutory tax/audit periods (generally up to 7 years)	Payment processors; fraud/chargeback vendors; auditors	No sale; no targeted ad sharing
Commercial Information (transaction history, merchant account activity)	You; our systems	Provide and improve Services; risk, underwriting, and fraud analysis; customer support	Account life + statutory periods	Affiliates; fraud/risk vendors; auditors	No sale; no targeted ad sharing
Internet/Network Activity (pages viewed, clicks, device/browser data, cookies)	Your devices; cookies/SDKs	Site operations; security; debugging; analytics; advertising measurement	See cookie lifetimes; analytics logs per internal schedule	Analytics and advertising partners; security vendors	May be shared for cross-context behavioral advertising unless you opt out
Geolocation (coarse)	Your devices; IP-derived	Security; fraud prevention; localized content	Log-level retention per schedule	Security and analytics vendors	May be shared for ads unless you opt out
Audio/Visual (support call recordings, chat transcripts)	You	Quality assurance; training; dispute resolution; compliance	Typically up to 3 years, or as required	QA vendors; dispute-resolution vendors	No
Professional/Employment (if you apply for a role or represent a business)	You; references	Talent management; due diligence; B2B relationship management	Hiring cycle + statutory periods	Background-screening vendors (if applicable)	No
Inferences (preferences derived from interactions)	Our analytics	Personalization; product improvement; marketing (with consent where required)	Per analytics schedule	Analytics/marketing vendors	May be shared unless you opt out
Sensitive PI (last 4 digits of card; login credentials; fraud signals)****	You; payment processors; security tools	Authentication; fraud prevention; PCI-DSS compliance	Minimum necessary; statutory periods	Security and fraud vendors; payment processors	No sale/share; used only for permitted, limited purposes

* “Share” is as defined under the California Privacy Rights Act (CPRA) for cross-context behavioral advertising.
*** Full payment card data is handled by PCI-compliant processors; we typically receive only tokenized or limited billing information.
**** We do not use or disclose Sensitive Personal Information for purposes other than those permitted by applicable law (e.g., to provide the Services, ensure security/integrity, prevent fraud, or comply with laws).

• Opt-Out of Sale/Sharing: If you wish to opt out of “sharing” for cross-context behavioral advertising, select “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” on our site, or use a supported browser signal (e.g., GPC).

• Retention: We retain information only as long as reasonably necessary for the purposes described above, to meet legal/operational requirements, and then delete or de-identify it per our data-retention schedule.

2) Personal Information We Collect

We collect personal information in three ways:

• Directly from you (e.g., account setup, forms, support interactions, events)

• Automatically via cookies, pixels, SDKs, and similar technologies (e.g., device data, pages viewed, usage analytics)

• From third parties (e.g., payment processors, fraud/risk partners, analytics providers, marketing partners, background-screening vendors, public databases)

3) How We Use Personal Information

We use personal information to:

• Operate, maintain, and improve the Services

• Process transactions; provide customer support; manage chargebacks and disputes

• Personalize experiences and communications (with consent where required)

• Perform analytics, measurement, and product development

• Prevent, detect, and investigate fraud, security incidents, and abuse

• Comply with laws, industry standards (including PCI DSS), and contractual obligations

• Enforce terms and protect our rights, users, and the public

• Conduct corporate reporting, auditing, and governance

• Advertising/Marketing: deliver or measure marketing (email/SMS with consent where required; targeted ads subject to your state rights/opt-outs)

We may aggregate or de-identify information and use it for any lawful purpose.

4) How We Disclose Information

We disclose personal information to:

• Service Providers/Processors (cloud hosting, analytics, customer support, payment processing, fraud/risk, security, auditing, communications)

• Affiliates and Subsidiaries for enterprise operations consistent with this Policy

• Business Transactions (e.g., merger, acquisition, reorganization, asset sale)

• Legal/Compliance (to comply with law, lawful requests, or to protect rights, safety, and integrity)

We do not sell personal information for monetary consideration. We may “share” certain data for cross-context behavioral advertising as described above, subject to your opt-out choices.

5) Cookies, Analytics, and Advertising Technologies

We and our partners use cookies, pixels, tags, local storage, and similar technologies to enable core functionality, maintain security, remember preferences, perform analytics (e.g., traffic, usage, performance), and deliver/measure advertising. Some partners may set cookies or collect information over time and across sites/apps.

• Manage Preferences: Use our on-site cookie control or your browser settings. Disabling cookies may limit certain features.

• Do Not Track: Our Services do not respond to DNT signals; we honor legally recognized signals like Global Privacy Control (GPC) for California residents.

• Examples of tools we may use: analytics, session-quality tools, advertising and measurement platforms, and bot-prevention tools (e.g., reCAPTCHA subject to the provider’s terms).

6) Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit and at rest (where appropriate), network segmentation, logging/monitoring, and vulnerability management. While we work hard to protect information, no security program is infallible.

7) Data Retention

We retain personal information for the duration necessary to fulfill the purposes described in this Policy, to comply with legal, accounting, or reporting requirements, resolve disputes, enforce agreements, and ensure business continuity. When no longer needed, we delete or de-identify information per our retention schedule.

8) Your U.S. State Privacy Rights

Depending on your state (e.g., CA, VA, CO, CT, UT), you may have the right to:

• Know/Access the categories and specific pieces of personal information we hold about you

• Correct inaccurate personal information

• Delete personal information (subject to exceptions)

• Portability (receive a copy in a portable format)

• Opt Out of (a) sale or sharing for targeted advertising and (b) certain profiling

• Appeal a rights request decision (where required)

How to Exercise Your Rights
Submit a request via:

• Email: [email protected]

We will verify your request (e.g., by confirming control of your email/phone or requesting limited additional information). Authorized agents may submit requests on your behalf if they provide proof of authorization and we can verify your identity.

Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Shine the Light (CA Civ. Code §1798.83): California residents may request information regarding our disclosures of certain categories of personal information to third parties for their direct marketing in the prior calendar year.

9) Children’s Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. We also do not knowingly sell or share personal information of consumers under 16. If you believe a child has provided information to us, contact [email protected] and we will take appropriate action.

10) Third-Party Links and Features

Our Services may link to or integrate with third-party sites, plug-ins, and features. Those parties may collect information pursuant to their own privacy policies, which we do not control. Review their policies before engaging.

11) Financial Services & PCI

Where our Services involve payment processing, we use PCI-DSS–compliant processors. We typically receive tokenized payment data and limited billing details sufficient for receipts, reconciliation, dispute resolution, and fraud prevention.

12) Changes to this Policy

We may update this Policy from time to time. The Effective Date above reflects the latest version. Material changes will be posted to our website; your continued use of the Services following changes signifies acceptance.

13) How to Contact Us

Celer Merchants Corporation
Email: [email protected]
Address: 1309 Coffeen Avenue STE 13622 Sheridan Wyoming 82801

Attn: Privacy Office

Accessibility: To request this Policy in an alternative format, contact [email protected].

14) Dispute Resolution

Where permitted by law, disputes arising out of or related to this Policy or the Services may be resolved through binding arbitration under the rules of the American Arbitration Association. Notwithstanding the foregoing, either party may seek injunctive relief in a court of competent jurisdiction. This Policy is governed by the laws of the State of Wyoming, without regard to conflict-of-laws principles.

“Your Privacy Choices” / CCPA Short-Form Notice 

NOTICE AT COLLECTION: We collect personal information for the purposes described in our Privacy Policy, including to provide and improve our Services, process transactions, secure our systems, and perform analytics and limited advertising. We do not sell personal information for money. We may share certain identifiers and internet/network activity with advertising or analytics partners for cross-context behavioral advertising. You can opt out at any time by selecting “Your Privacy Choices” or “Do Not Sell or Share My Personal Information.” We retain information only as long as necessary for the purposes disclosed. For details about categories, sources, purposes, retention, and your rights, see our full Privacy Policy.