This policy explains what we collect, why, and who sees it — for you as our customer, and for your customers whose invoices and payments flow through Paradox.
Last updated August 8, 2026To run the service you asked for: charging cards on your instruction, sending invoices, receipts and reminders from your business, reconciling your ledger against settlement, and billing your Paradox subscription. We do not sell personal information, we do not use your customers' data for advertising, and we do not train AI models on your data.
Only the parties needed to operate the service:
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Paradox uses a single encrypted session cookie to keep you signed in, and a local preference for light/dark mode. We use Google Tag Manager for visitor analytics on our website; we never feed it your customers' data or anything from inside your account.
If you or your customers opt in to text messages, we use the mobile number solely to send the transactional messages that were requested — payment receipts, links to view and pay an invoice, payment reminders, and notices about a subscription the recipient signed up for — sent by Paradox Solutions on behalf of the business involved. Consent is collected through an unchecked-by-default checkbox at the point of payment, or recorded by a business for a customer who asked to receive texts. Message frequency varies. Message and data rates may apply.
Reply STOP to any message to opt out at any time, or HELP for help. Opt-outs take effect immediately and apply across every business on the platform.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of sharing described in this policy exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties. Mobile numbers are shared only with our messaging provider to the extent necessary to deliver the messages you requested. The full program terms are in our Mobile Messaging Terms.
We keep your data while your account is active. Transaction records may be retained after closure where financial-record laws require it. Otherwise, close your account and ask for deletion via the contact page and we'll erase your data within 30 days.
All traffic is encrypted in transit with TLS. Gateway credentials are encrypted at rest with AES-256; passwords are stored only as salted hashes. Card numbers never reach our systems by design. No internet service can promise perfection — if we ever learn of a breach affecting your data, we will notify you promptly with what we know and what we're doing.
You can access, correct, export or delete your personal information. California residents have these rights under the CCPA/CPRA; we honor the same rights for everyone regardless of where you live. Write to us via the contact page, email [email protected], or mail Paradox Solutions Inc., 18524 Sophia Ln, Tarzana, CA 91356 — we'll respond within 30 days.