Petl Pay - Privacy Policy

Last updated: 17 July 2026

1. Who We Are

Petl Pay is a trading name and product of Rafiki Works LTD ("Petl," "we," "us," or "our").

Company details:

Legal entity: Rafiki Works LTD Registered address: 86–90 Paul Street, London, United Kingdom, EC2A 4NE Company type: Private Limited Company Contact email: greg@petlpay.com

Petl Pay provides software tools for project-based teams to manage workflows, generate invoices, and route payments to multiple contributors.

Petl Pay is not a bank, money service business, or custodian of funds. Payment processing, settlement, identity verification, and compliance services are provided by regulated third-party providers.

2. Scope of This Privacy Policy

This Privacy Policy explains how we collect, use, store, and share personal information when you:

• Use the Petl Pay website, software platform, or related services (the "Platform")
• Create or manage a Petl Pay account
• Receive or send payments through the Platform
• Connect third-party applications or AI agents to your account
• Communicate with us (support, sales, onboarding, or events)

By accessing or using the Platform, you agree to this Privacy Policy.

3. Our Role vs Third Parties

Petl Pay's role

For most Platform activities, Petl Pay acts as a data controller, determining how and why personal data is processed in relation to workflows, invoicing, and account management.

Third-party payment providers

Payments and related compliance services are provided by regulated third-party providers.

In these cases:

• Petl Pay may act as a data processor or intermediary
• Third-party providers act as independent data controllers for payment execution, compliance, fraud prevention, and regulatory obligations

Their processing is governed by their own privacy policies.

4. Information We Collect

4.1 Information you provide to Petl Pay

We may collect:

• Name, business name, email address, phone number
• Account credentials and profile details
• Invoicing data, project metadata, contributor details
• Communications with us (emails, chat messages, support requests)

4.2 Authentication data

Sign-in and session data — including your email address, authentication events, IP address, and device or session identifiers — is processed via our authentication infrastructure provider, WorkOS, acting as our data processor.

4.3 Information processed by payment providers

When you use payment features, third-party providers may process:

• Bank account details
• Payment card information
• Wallet addresses or transaction identifiers
• Government-issued identification
• Tax or compliance-related information

Petl Pay does not store payment card numbers, bank credentials, private wallet keys, or government IDs.

5. Sensitive Information

Sensitive information may include:

• Financial account details
• Government-issued identification
• Tax identifiers
• Wallet credentials or transaction metadata

Petl Pay does not independently use sensitive information for any purpose other than enabling access to and use of the Platform.

Sensitive information required for payments or compliance is processed directly by third-party payment and identity-verification providers under their own regulatory obligations.

6. How We Use Personal Information

We use personal information to:

• Provide and operate the Platform
• Create and manage user accounts
• Generate invoices and project records
• Route payment instructions to payment providers
• Communicate with users and provide support
• Improve Platform performance and reliability
• Prevent fraud, abuse, and misuse
• Comply with legal and regulatory obligations

We do not sell personal information or use it for cross-context behavioural advertising.

6.1 Support access

Authorised Petl Pay staff may temporarily access or impersonate your account session to provide support you have requested, diagnose and resolve technical issues, investigate suspected fraud, abuse, or security incidents, or meet legal obligations. All such access requires a recorded justification, is time-limited, and is logged for audit purposes.

7. Legal Basis for Processing

Where applicable data-protection laws apply, we process personal information on the following bases:

• Contract performance – to provide the Platform and Services
• Legitimate interests – platform security, fraud prevention, compliance, support access, and operational improvement
• Consent – where required (e.g. marketing communications)
• Legal obligation – regulatory, tax, or compliance requirements

8. Sharing of Personal Information

We may share personal information with:

• Payment and financial service providers
• Service providers (authentication, hosting, analytics, support tools)
• Professional advisors (legal, accounting, compliance)
• Authorities or regulators, where required by law
• Corporate transaction counterparties, in the event of a merger, acquisition, restructuring, or sale

We require service providers to process data only in accordance with contractual and legal obligations.

8.1 AI agents and connected applications

Where you connect a third-party application or AI agent to your account — for example via our MCP server, using Claude or another AI assistant — we disclose account data to that application at your direction. This may include projects, invoices, payment records, payment links, and member details.

The third-party provider (including any AI model provider, such as Anthropic) processes that data as an independent controller under its own privacy policy. Petl Pay does not control, and is not responsible for, that provider's processing, retention, or use of your data.

You are responsible for the permissions you grant to connected applications and for revoking access you no longer want. You can revoke a connected application's access at any time through your account settings or by contacting us.

9. International Data Transfers

Petl Pay is based in the United Kingdom. Some service providers, including payment infrastructure, authentication, and AI providers, process data outside the UK and EEA, including in the United States.

Where applicable, such transfers rely on:

• Contractual safeguards
• Regulatory obligations of financial institutions
• User consent or contract performance

10. Data Retention

We retain personal information only for as long as necessary to:

• Provide the Platform
• Meet legal, tax, and regulatory obligations
• Resolve disputes or enforce agreements

Payment-related data retention is governed by the policies and regulatory requirements of third-party payment providers.

Support-access audit logs are retained for as long as necessary for security and audit purposes.

11. Security

We implement reasonable technical and organisational measures to protect personal information, including:

• Access controls
• Encryption
• Secure hosting infrastructure
• Logged, time-limited, and justified support access to user accounts

No system is completely secure, and users remain responsible for safeguarding their account credentials and for the security of any applications or AI agents they connect to their account.

12. Cookies and Analytics

Petl Pay uses cookies and similar technologies to:

• Operate the Platform
• Analyse usage and improve performance

Third-party providers (including payment providers) may use their own cookies or tracking technologies under their own policies. Petl Pay does not control those technologies.

13. Children's Privacy

The Platform is not intended for individuals under 18. We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email. Continued use of the Platform constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, contact:

greg@petlpay.com

‍