Last updated on March 9, 2026

This Privacy Policy explains how Pandabase (“Pandabase”, “we”, “us”) collects, uses, shares, and protects information about you. It applies to:

• Merchants using Pandabase for their business.
• Buyers purchasing from Pandabase-powered businesses.
• Developers building with Pandabase APIs.
• Visitors to our website or anyone contacting support.

If we make significant changes to this policy, we will notify you by email or through the platform.

1. Information We Collect

1.1 Information You Provide

• Account details (name, email, password).
• Business information (business name, address, tax ID).
• Payment information (bank account details for payouts, billing information).
• Communications with us (support tickets, emails).

1.2 Information We Collect Automatically

• Device and browser information (IP address, browser type, operating system).
• Usage data (pages visited, features used, timestamps).
• Transaction data (purchase amounts, products, payment methods).

1.3 Information from Third Parties

• Identity verification data from our verification partners.
• Payment data from Card Schemes and payment processors.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the platform.
• Process transactions and send related communications.
• Calculate, collect, and remit taxes.
• Detect and prevent fraud.
• Comply with legal obligations.
• Communicate with you about your account, updates, and promotions (with opt-out).
• Provide customer support.

3. How We Share Your Information

We share your information with:

• Payment processors and Card Schemes — to process transactions.
• Tax authorities — to comply with tax obligations.
• Identity verification providers — to verify your identity.
• Cloud infrastructure providers — to host and operate the platform.
• Law enforcement — when required by law, subpoena, or court order.

We do not sell your personal information.

4. Cookies

We use cookies and similar technologies to:

• Keep you signed in.
• Remember your preferences.
• Understand how you use the platform.
• Improve performance and security.

Essential cookies are required for the platform to function. Analytics cookies help us understand usage patterns and can be disabled through the cookie banner.

You can manage cookies through your browser settings. Disabling essential cookies may affect platform functionality.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account closure, we retain data as required by law (typically for tax and compliance purposes) and delete it when no longer needed.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data.
• Correct inaccurate data.
• Delete your data (subject to legal retention requirements).
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact privacy@pandabase.io.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

EU/EEA Residents (GDPR): Our legal bases for processing are contract performance, legitimate interests, legal obligation, and consent. You may lodge a complaint with your local data protection authority.

7. Security

All user data is stored in secure data centers located in Ashburn, Virginia. We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security assessments. No system is perfectly secure — if you discover a vulnerability, please report it to security@pandabase.io.

8. International Transfers

Your data may be transferred to and processed in the United States. For EU/EEA transfers, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

9. Children

Pandabase is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Contact

For questions or concerns about this Privacy Policy, contact us at privacy@pandabase.io.