Privacy & Data Handling

MerchantOS does not store, process, or retain merchant card numbers or sensitive cardholder data on its servers.

All payment data is tokenized through a PCI-compliant third-party gateway at the point of entry. The raw card data is exchanged directly between the merchant and the gateway — MerchantOS only receives and stores a non-sensitive token reference.

Because card data never resides on MerchantOS servers, our platform maintains a minimal PCI compliance footprint. All data in transit is protected with industry-standard TLS encryption, ensuring your information is securely transmitted end to end.

All content, assets, and features within MerchantOS are either proprietary to MerchantOS or properly licensed for use within the platform.

Third-party content is used only with proper authorization, and attribution is provided where required by the applicable license.

Unauthorized reproduction, redistribution, or use of MerchantOS content is prohibited.