Legal

Privacy Policy

Last updated: January 1, 2025

1. Overview

The NoCheck Group, LLC (“NoCheck,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal information entrusted to us in connection with our enterprise payment platform and related services.

This Privacy Policy describes how we collect, use, store, and protect personal information in connection with our services, website (nocheck.com), and business operations.

2. Information We Collect

We collect information in the following ways:

  • Business Information: Company name, contact information, and details about your organization's payment operations.
  • Personal Information: Name, email address, phone number, and role provided when requesting a demo or contacting us.
  • Payment Data: In the course of providing payment processing services to enterprise clients, we handle personal and financial information of payment recipients, including bank account information, government identifiers, and transaction records.
  • Technical Information: IP addresses, browser type, device information, and usage data collected through standard web technologies.

3. How We Use Information

We use collected information to:

  • Provide, operate, and improve our payment platform and related services
  • Process payment transactions on behalf of our enterprise clients
  • Communicate with prospective and current clients about our services
  • Maintain security and prevent fraud
  • Comply with legal obligations, including financial regulations and data protection laws
  • Fulfill our obligations as a PCI-DSS, SOC2, and HIPAA compliant organization

4. Data Security

NoCheck implements industry-leading security measures to protect personal information, including:

  • AES 256 encryption for all data in transit and at rest
  • PCI-DSS compliant cardholder data environments
  • SOC2 Type II certified security controls
  • HIPAA-compliant handling of protected health information
  • Proprietary fraud detection systems including Early Warning System integration
  • Physical access controls at our Michigan and Luxembourg data centers
  • Annual third-party security audits

5. Data Sharing

We do not sell personal information. We may share information with:

  • Banking Partners: JP Morgan Chase, US Bank, Bank of America, and Key Bank, in connection with payment processing.
  • Payment Networks: ACH, RTP®, FedNow, and other payment rail operators as required to process transactions.
  • Regulatory Authorities: As required by applicable law, regulation, or legal process.
  • Service Providers: Third parties who assist in operating our platform, under strict confidentiality obligations.

6. International Data Processing

NoCheck operates data processing facilities in Michigan, USA and Luxembourg, EU. Our Luxembourg facility operates under EU data protection frameworks. International data transfers are conducted in compliance with applicable cross-border data transfer regulations.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, or request deletion of personal data. To exercise these rights or ask questions about our data practices, contact us at:

The NoCheck Group, LLC

privacy@nocheck.com

248.621.0900

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify enterprise clients of material changes through our standard communication channels. Your continued use of our services following notice of changes constitutes acceptance of the updated policy.