1. Introduction
PayHub LLC ("we", "us") operates the payment link platform at payhub.am. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over your data under applicable data protection law and applicable international standards.
2. Information we collect
From merchants: business name, Tax ID, contact email, phone number, and account credentials.
From customers who pay through a PayHub link: name and email if provided, masked card details (the card brand and the last four digits), Idram account identifier where applicable, IP address, and browser metadata for fraud prevention.
Automatically: log files, request timestamps, and audit log entries describing actions taken in the admin panel.
Card numbers: a full card number is typed either on the payment provider's own page or, where inline card entry is used, into PayHub's card form, which passes it straight to the provider. PayHub never stores a full card number.
3. How we use information
We use personal data to operate the service (process payments, send receipts, generate reports), prevent fraud and abuse, comply with legal obligations under applicable tax and AML regulations, and improve our platform. We do not sell personal data to third parties.
4. Sharing & processors
PayHub shares limited personal data with the following sub-processors strictly to deliver the service: the payment providers that process payments — acquiring banks connected through ArCa (such as IDBANK), Stripe (card payments) and Idram (wallet payments) — and Google (Google Workspace), which delivers our email. PayHub's servers are located in Armenia. We may also disclose data when required by law, court order, or regulatory request.
5. Cookies & tracking
PayHub uses essential cookies only: to keep you signed in, to remember your language and time zone, and, on a payment page, to recognize a returning visitor so that a payment link that can be paid more than once keeps their order. We load no analytics or advertising trackers on payhub.am. When you pay with Stripe, Stripe's payment form is loaded from Stripe and may set its own cookies to prevent fraud. Merchants and admin users may not opt out of essential cookies, as they are required for the service to function.
6. Data security
Connections to PayHub, and from PayHub to payment providers and our email provider, are encrypted with TLS 1.2 or newer. Payment-provider credentials and webhook signing secrets are encrypted at rest with AES-256-GCM, and passwords are stored only as Argon2id hashes. Access to production systems is limited to authorized personnel. Actions taken in the PayHub admin panels are recorded in a tamper-evident audit log: each entry carries the hash of the entry before it.
7. Data retention
Transaction records (orders, receipts, audit log entries) are retained for 7 years to comply with applicable tax and accounting regulations. A customer's profile is anonymized when the customer's request to remove their account is approved, or when PayHub removes the account; the records of their payments are kept, as above. A merchant's account data is kept after the account is closed, with the transaction records it belongs to. Contact details given with a guest payment are kept with that payment's records.
8. Your rights
Under applicable data-protection law you have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion (subject to our legal retention obligations), object to certain types of processing, and withdraw consent. To exercise any of these rights, write to privacy@payhub.am.
9. International transfers
PayHub stores production data on servers located in Armenia. Stripe processes card data in the United States and other jurisdictions where it operates, and Google processes our email in the jurisdictions where it operates. By using PayHub, you consent to your data being transferred to these jurisdictions, where standard contractual clauses or equivalent safeguards apply.
10. Children's privacy
PayHub is not directed at children under the age of 16. We do not knowingly collect data from minors. If you believe we have collected such data, please contact our DPO and we will remove it.
11. Changes to this policy
We may revise this Privacy Policy. Each revision is published on this page as a new version, with its number and the date it was published shown at the top of the page, and every earlier version is kept.
When a revision is material, the next time you sign in to PayHub you will be shown that this policy has changed and asked to accept the new version before you continue. Corrections that do not change its meaning, such as fixing a typo or a translation, are marked with the date of the correction.
12. Language
This policy is written in English and may be translated into other languages. A translation is provided so that you can read it in your own language. If a translation differs from the English version, the English version prevails, unless the law that applies to you requires the version in your language to prevail.
13. Contact & DPO
Data Protection Officer: dpo@payhub.am
General privacy questions: privacy@payhub.am
Postal: PayHub, registered office (available on request).
See also
Our Terms of Service explain the rules for using the platform.