Privacy Policy

How Heritage Brands LLC handles information collected through Kleropay.

This Privacy Policy explains how Heritage Brands LLC ("Kleropay", "we", "us") collects, uses, and protects information when you visit kleropay.com or use our payment infrastructure. Kleropay is a non-custodial card-to-crypto payment rail operated by Heritage Brands LLC, a Wyoming limited liability company.

1. Who this policy applies to

This policy applies to information collected from visitors to kleropay.com and from merchants who integrate the Kleropay payment infrastructure. End consumers transacting through a merchant's site interact directly with our regulated onramp partner (e.g., MoonPay, Transak); those parties' privacy policies govern the consumer-facing card and KYC data they collect.

2. Information we collect

From merchants

• Business name, legal entity, registration details, and beneficial-owner information needed for merchant onboarding
• Operational contact information (name, email, phone)
• Wallet addresses for crypto settlement
• Website domain and integration configuration

From visitors to kleropay.com

• Information submitted through the contact form (name, email, message)
• Technical information automatically collected by our web servers: IP address, browser type, pages visited, referrer URL, timestamps

What we do NOT collect

• Payment card details — handled exclusively by the regulated onramp partner
• Consumer KYC documents — handled exclusively by the regulated onramp partner
• Private keys, seed phrases, or any custody of cryptocurrency

3. How we use information

• To onboard merchants and provision their Kleropay integration
• To respond to inquiries submitted through the contact form
• To operate and improve the kleropay.com website and our payment infrastructure
• To meet legal, regulatory, and audit obligations
• To detect, prevent, and respond to fraud or abuse

4. How we share information

We share information only as needed to provide our service:

• Regulated onramp partners (e.g., MoonPay, Transak) — to process consumer card payments and deliver cryptocurrency on behalf of the merchant
• Infrastructure providers (hosting, email, analytics) — for the technical operation of our service
• Legal and regulatory authorities — when required by law, valid legal process, or to protect rights and safety

We do not sell personal information.

5. Data security

We use industry-standard administrative, technical, and physical controls to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but commit to prompt breach notification where required by law.

6. Data retention

We retain personal information for as long as necessary to provide our service, comply with legal obligations, resolve disputes, and enforce our agreements. Onboarding records are typically retained for at least five (5) years after the merchant relationship ends, consistent with US recordkeeping requirements.

7. Your rights

Depending on where you live, you may have rights to: access, correct, or delete your personal information; restrict or object to certain processing; receive a copy of your personal information in a portable format; and lodge a complaint with a data protection authority. To exercise these rights, contact us using the details below.

8. Cookies and analytics

kleropay.com uses minimal cookies for essential site operation. We do not currently use third-party advertising or behavioral tracking cookies on this site.

9. Children's privacy

Kleropay is a B2B payment infrastructure service. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected such information, contact us and we will delete it.

10. International users

Kleropay operates from the United States. If you access the service from outside the United States, you understand and consent to your information being processed in the United States, which may have different data protection laws than your jurisdiction.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised effective date. Material changes will be communicated to active merchants directly.

12. Contact