Privacy Policy

DTLA Professional Services, LLC (doing business as "PayXT", "we", "us", or "our") respects your privacy and is committed to protecting the personal and financial information of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (payxt.app) and use our mobile application and services. PayXT is offered to users in the United States, the European Union / European Economic Area (EU/EEA), the United Kingdom, and other supported regions.

Data controller: For personal data processed in connection with PayXT, the controller is DTLA Professional Services, LLC, 770 S Grand Ave, Los Angeles, CA 90017, USA. Contact: payxt.app/contact or phone (213) 444-2224.

1. Information We Collect

We collect information that you voluntarily provide to us when you register on the App, express an interest in obtaining information about us or our products, or otherwise contact us. The personal information that we collect depends on the context of your interactions with us and the App.

• Account Information: Name, email address, phone number, and business details when you create a PayXT account.
• Financial & Gateway Data: To facilitate payments, you may connect Stripe (and related merchant tools). We do not store your clients' full credit card numbers on our servers. Sensitive payment processing is handled by your connected Stripe merchant account.
• Transaction Data: Information about the invoices generated, including transaction amounts, taxes applied, and dates.
• Communications & Support: We collect personal information when you contact us. Because California is a "two-party consent" state, by calling our support lines, you explicitly consent to your call being answered, recorded, transcribed, and processed by our AI assistant (Sona) for quality and support purposes.
• Device, Usage & Attribution Information: Device identifiers (such as advertising IDs where permitted), IP address, browser or app type, operating system, app version, install/open events, referral and campaign data, and how you interact with our website and App. We use this to improve performance, resolve bugs, measure marketing effectiveness, and attribute downloads and in-app events to advertising campaigns.

2. Cookies, Analytics, and Marketing Measurement

We use cookies, pixels, SDKs, web beacons, local storage, and similar technologies on our website and in our mobile App to operate the Service, understand usage, measure advertising performance, and improve PayXT.

2.1 Website analytics

On payxt.app we use Google Analytics (via gtag.js / Google tags) to analyze website traffic, monitor aggregate user behavior, and understand how our pages are used. Our hosting infrastructure may also collect standard server/log data (IP address, browser type, referring pages, and access times) for security, performance, and diagnostics.

2.2 Mobile attribution and advertising analytics (AppsFlyer & Meta)

In the PayXT mobile App we use third-party measurement and advertising partners to track app marketing performance, installs/downloads, opens, and related in-app conversion events (for example trial starts and subscription-related events), including:

• AppsFlyer: Mobile attribution and analytics to measure which campaigns, ads, and channels drive app installs and key in-app events, and to help us optimize marketing spend and performance reporting.
• Meta (Facebook) SDK / App Events and related Meta advertising technologies (sometimes called Meta Pixel in web contexts): Used to measure and optimize ads on Meta platforms (including Facebook and Instagram), log app events, and support advertising analytics and retargeting where permitted by law and platform settings.

These partners may receive or process device and usage data such as advertising identifiers (IDFA on iOS when authorized; GAID on Android), IP address, device model, OS version, app events, and campaign/attribution parameters. On iOS, certain advertising tracking is subject to Apple’s App Tracking Transparency (ATT) prompt. If you deny tracking permission, we limit or disable advertiser tracking features accordingly (for example Meta Advertiser Tracking), though some limited measurement or aggregated reporting may still occur as allowed by Apple, Google, and applicable law.

For more information about how these partners process data, see their policies:

• AppsFlyer: AppsFlyer Privacy Policy
• Meta: Meta Privacy Policy
• Google Analytics: Google Privacy Policy

2.3 Cookie Policy

This Cookie Policy explains how PayXT and our partners use cookies and similar technologies on our website and, where applicable, analogous identifiers in our App.

What are cookies? Cookies are small text files stored on your device when you visit a website. Similar technologies include pixels, tags, local storage, and mobile SDKs that store or access identifiers on your device.

We (and our service providers) may use the following categories:

• Strictly necessary: Required for basic site/app security, load balancing, and core functionality.
• Performance / analytics: Help us understand traffic and usage (for example Google Analytics on the website).
• Advertising / marketing measurement: Help us measure ad campaigns, attribute installs and conversions, and improve marketing performance (for example AppsFlyer and Meta technologies in the App, and any advertising tags we may use on the website).

Your choices:

• Browser cookies: You can usually block or delete cookies in your browser settings. Blocking cookies may affect some website features.
• iOS tracking: Use the system App Tracking Transparency prompt and Settings → Privacy & Security → Tracking to control cross-app tracking.
• Android advertising ID: You can reset or limit your advertising ID in your device’s Google/ads settings.
• Opt-out resources: Industry tools such as the Digital Advertising Alliance opt-out (where available) and partner-specific controls linked above.

Where required by law (including in the EU/EEA and UK), we treat certain analytics and advertising cookies/identifiers as optional and will obtain consent or honor opt-out/objection rights as applicable before using non-essential cookies or similar technologies.

3. How We Use Your Information

We use the information we collect or receive for the following business purposes:

• To facilitate account creation and logon processes.
• To generate secure checkout links and itemized invoices for your clients.
• To securely pass transaction data to your authorized payment gateways (Stripe).
• To respond to user inquiries and offer customer support.
• To measure marketing performance, attribute downloads/installs and key in-app events, analyze campaign effectiveness, and improve our advertising (including via AppsFlyer and Meta).
• To enforce our terms, conditions, and policies for business purposes, legal reasons, and contractual obligations.

4. How We Share Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. Specifically, we may share data with:

• Payment Processors: We transmit necessary transaction details to Stripe to process the payments you initiate.
• Cloud Infrastructure: We use enterprise-grade cloud service providers (such as Google Cloud/Firebase) to host our database and execute secure server functions.
• Analytics & Attribution Partners: AppsFlyer and Meta (Facebook/Instagram advertising and measurement tools), as described in Section 2, to measure installs, app events, and marketing performance.
• Website Analytics: Google Analytics / Google tags for website usage analysis.
• Subscription Management: We use RevenueCat to securely manage, sync, and validate your in-app subscription status across iOS and Android platforms.
• Legal Obligations: If we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

5. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. Sensitive credentials are transmitted and stored using industry-standard protections. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

6. Third-Party Websites and Services

Our App generates links to third-party payment gateways (such as checkout.stripe.com) and integrates third-party SDKs and services (including AppsFlyer, Meta, Google, Stripe, and RevenueCat). We cannot guarantee the safety and privacy of data you provide directly to any third parties. Data collected by third parties is governed by their own privacy policies. We are not responsible for the content or privacy and security practices of those third parties.

7. Legal Bases for Processing (EU/EEA and UK)

If you are in the EU/EEA or UK, we process personal data under the EU General Data Protection Regulation (GDPR) and UK GDPR, as applicable, on one or more of the following legal bases:

• Contract: Processing necessary to provide the PayXT service you request (account creation, invoicing features, Stripe Connect onboarding support, subscription entitlement checks).
• Legitimate interests: Improving security, preventing fraud/abuse, diagnosing technical issues, understanding product usage in a privacy-respecting way, and operating our business—balanced against your rights and expectations.
• Consent: Where required for non-essential cookies, certain advertising/measurement technologies (including AppsFlyer and Meta features that rely on tracking permissions), or optional communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation: Where we must retain or disclose information to comply with applicable law, tax, accounting, or regulatory requirements.

8. Your Privacy Rights (including EU/EEA, UK, and California)

Depending on your location, you may have rights regarding your personal information.

8.1 EU/EEA and UK (GDPR / UK GDPR)

If you are in the EU/EEA or UK, you may have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete personal data.
• Erase personal data (“right to be forgotten”) in certain circumstances.
• Restrict or object to certain processing, including processing based on legitimate interests and processing for direct marketing.
• Data portability (receive data you provided in a structured, commonly used, machine-readable format, where technically feasible).
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local supervisory authority (for example, your EU Member State data protection authority, or the UK Information Commissioner’s Office).

We will respond to GDPR requests within the timeframes required by law (generally within one month, extendable where permitted).

8.2 California and other US state laws

Depending on your state (e.g., California CCPA/CPRA), you may have the right to:

• Request access and obtain a copy of your personal information.
• Request rectification or erasure of your personal data.
• Restrict the processing of your personal information.
• Opt out of certain “sale” or “sharing” of personal information for cross-context behavioral advertising, including by adjusting device tracking settings or contacting us.

To exercise these rights, contact us using the information in Section 14. We will consider and act upon any request in accordance with applicable data protection laws. We will not discriminate against you for exercising privacy rights.

9. Account and Data Deletion

You have the right to request the complete deletion of your PayXT account and associated personal data. You can delete your account directly within the PayXT mobile app settings, or request deletion via our contact form or data deletion page. Upon request, we will permanently delete your account and remove associated personal data from our active systems within 30 days, subject to legal and tax retention requirements. Deletion of your PayXT account may not automatically delete data already processed by independent third parties (such as AppsFlyer, Meta, Google, Stripe, Apple, or RevenueCat); you may need to exercise rights directly with those providers where available.

10. Data Retention

We retain personal data only as long as needed for the purposes described in this Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention practices include:

• Account data: Kept while your account remains active, then deleted or anonymized within approximately 30 days after account deletion, unless longer retention is required by law.
• Transaction / invoice records: May be retained longer where needed for tax, accounting, fraud prevention, or legal claims.
• Analytics and marketing measurement data: Retained according to our analytics partners’ retention settings and our business needs, typically in aggregated or pseudonymized form where practicable.
• Support communications: Retained as needed to handle your request and improve support quality.

11. International Data Transfers

DTLA Professional Services, LLC is based in the United States. If you use PayXT from the EU/EEA, UK, or other regions, your personal data may be transferred to and processed in the United States and other countries where our service providers operate. Those countries may not provide the same level of data protection as your home country.

Where required by GDPR/UK GDPR, we rely on appropriate transfer safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs) and/or the UK International Data Transfer Agreement / Addendum, and additional technical and organizational measures as appropriate. By using the Service from outside the United States, you acknowledge these transfers subject to applicable law and your rights described above.

12. Children

PayXT is a business productivity application intended for adults and business users. It is not directed to children under 16 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take steps to delete it.

13. App Store and Google Play Terms

PayXT is distributed through the Apple App Store and Google Play. In addition to this Privacy Policy and our Terms of Service, your download and use of the App may also be subject to the platform provider’s terms:

• Apple Licensed Application End User License Agreement (Standard EULA): If you download PayXT from the Apple App Store, your use of the iOS app is also governed by Apple’s standard Licensed Application End User License Agreement, available at https://www.apple.com/legal/internet-services/itunes/dev/stdeula/.
• Google Play: If you download PayXT from Google Play, your use of the Android app is also subject to the Google Play Terms of Service. Google’s collection and use of information is described in the Google Privacy Policy. PayXT’s own data practices for the Android app are described in this Privacy Policy, which is the privacy policy URL we provide for Google Play’s User Data / Data safety requirements (see also Google Play’s User Data policy).

In-app purchases and subscriptions are billed by Apple or Google according to their store rules. Refunds for subscriptions are handled by Apple or Google, not directly by PayXT, except where required by applicable law.

14. Contact Us

If you have questions or comments about this Privacy Policy, wish to exercise privacy rights (including GDPR requests), or need help with account/data deletion, contact us: