Privacy notice

GM-Pay processes merchant account identifiers, business names, payment-link labels, payment amounts, invoice and settlement status, reference codes, security logs, and basic network information needed to prevent abuse.

Public payer pages do not ask for passwords, bank credentials, card numbers, phone numbers, or government identification.

Authenticated merchant and administrator portals use a short-lived, secure, HTTP-only session cookie. Public payment pages do not require an account cookie.

Lightning invoices are created through GM-Pay's configured payment processor. If a payer chooses to continue to an external payment application, that application processes information under its own privacy terms.

Transaction and audit records are retained for operational, accounting, fraud-prevention, and security purposes. Access is restricted by account role and server-side authorization.