Rombis Merchant Privacy Policy

1. Who This Policy Applies To

The Service is intended only for users located in the United States who are at least 18 years old and who are uploading a statement on behalf of a business of which they are the merchant or an authorized representative. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. The Service is not intended for residents of the European Economic Area, the United Kingdom, or other jurisdictions whose laws require a separate legal basis for processing; please do not use the Service if you are located there.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily submit to us, including:

• Contact information: name, business name, email address, telephone number, and business mailing address provided through forms or through communications with us.
• Uploaded merchant processing statements: PDF files you upload for analysis. These statements typically contain the merchant's legal name, DBA, business address, merchant identification number (MID), processor name, monthly processing volume, transaction counts, fee breakdowns, card brand mix, effective rate, and similar payment-processing information.
• Communications: content of messages you send us through the contact form, email, or other channels.

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Technical data: IP address, browser type and version, device type and operating system, referring URL, pages viewed, time and duration of visits, and similar log data.
• Cookies and similar technologies: used to maintain session state, remember preferences, measure usage, and support analytics. See Section 8 for details.

2.3 Information We Do Not Ask For

We do not request, and you should not upload, statements containing payment card account numbers, bank account numbers, Social Security numbers, or other sensitive personal information beyond what ordinarily appears on a merchant processing statement.

3. How We Use Information

We use the information we collect to:

(a) provide, operate, maintain, and secure the Service, including generating your analysis report and giving you ongoing access to it;

(b) communicate with you about the Service, including responding to your inquiries;

(c) contact you by email, telephone, text message (SMS), or other channels regarding payment processing services, rate comparisons, referrals to merchant services providers, and related offers from MARGN and our referral partners;

(d) share information from your uploaded statement with merchant services providers in our referral network so those providers may contact you with competing offers;

(e) train, refine, and improve our analytical models, algorithms, benchmarks, and AI/ML systems used to deliver the Service, and develop new products and features;

(f) compile de-identified, aggregated statistics and benchmarks;

(g) detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Use;

(h) comply with legal obligations and enforce our legal rights.

4. Consent to Contact (Including Calls and Texts)

By uploading a statement and providing your contact information, you expressly consent to be contacted by MARGN and our referral partners at the telephone number, email address, and physical address you provide (or that appears in your uploaded statement), including by automatic telephone dialing system, artificial or prerecorded voice, and SMS text message. Consent is not a condition of any purchase. Standard message and data rates may apply to text messages. You may revoke consent at any time using the opt-out methods in Section 9.

5. How We Share Information

We share information in the following circumstances:

5.1 Referral Partners

We share information from uploaded statements and your contact information with merchant services providers and other referral partners so they can contact you with competing rate and service offers. This sharing is a core part of how the Service works and how we are able to offer it for free.

Under the California Consumer Privacy Act and similar state laws, this sharing may qualify as a “sale” or “sharing” of personal information. You have the right to opt out; see Section 9.

5.2 Service Providers

We share information with vendors and subcontractors that help us operate the Service, including cloud hosting, email delivery, analytics, customer support, AI/ML services, and payment processing. These providers are bound by contract to use information only as needed to perform services for us.

5.3 Legal and Protective Disclosures

We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, subpoena, court order, or other legal process; to enforce our Terms of Use or other agreements; to protect MARGN's rights, property, or safety or that of our users or others; or to investigate suspected fraud or abuse.

5.4 Business Transfers

If MARGN is involved in a merger, acquisition, reorganization, financing, or sale of all or substantially all of our assets, information may be transferred to the acquiring or successor entity. We will notify you of any such transfer by email or a notice on our website.

5.5 With Your Direction

We may share information with third parties at your direction or with your consent.

5.6 Aggregated and De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for any purpose, including market research, industry reporting, and product improvement.

6. Data Retention

We retain uploaded statements, analysis reports, and associated contact information for as long as reasonably necessary to provide the Service (including to give you continued access to your report), to train and improve our systems, to comply with legal obligations, to resolve disputes, and to enforce our agreements. De-identified data derived from uploaded statements and aggregated benchmarks may be retained indefinitely.

7. Security

We maintain commercially reasonable administrative, physical, and technical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. No method of transmission over the internet or electronic storage is completely secure, however, and we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, and similar technologies to operate the Service, remember preferences, analyze usage, and support marketing. You can control cookies through your browser settings; however, disabling cookies may affect the functionality of the Service. We currently do not respond to “Do Not Track” browser signals.

9. Your Choices and Rights

9.1 Opt Out of Contact

You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email. You may opt out of marketing calls and text messages by replying STOP to any text message, by telling the caller you wish to be placed on our do-not-call list, or by contacting us at support@rombis.ai. Even after you opt out of marketing communications, we may continue to send you non-marketing communications about the Service (for example, to respond to your inquiries).

9.2 Do Not Sell or Share My Personal Information

California residents, and residents of other U.S. states with similar laws, have the right to opt out of the “sale” or “sharing” of their personal information. You may exercise this right by emailing support@rombis.ai with the subject line “Do Not Sell or Share.” Exercising this right will stop future sharing of your information with our referral partners described in Section 5.1.

9.3 Other Privacy Rights

Depending on where you reside, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate personal information;
• request deletion of your personal information;
• request portability of your personal information in a structured, commonly used format;
• limit the use and disclosure of sensitive personal information;
• not be discriminated against for exercising any of these rights.

To exercise these rights, email support@rombis.ai. We will verify your identity before responding and will respond within the timeframe required by applicable law. You may designate an authorized agent to submit requests on your behalf, subject to proof of authorization and identity verification.

9.4 California “Shine the Light”

California residents may request, once per calendar year, a notice describing the categories of personal information we shared with third parties for those third parties' direct marketing purposes in the prior calendar year. Send requests to support@rombis.ai.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. Parents or guardians who believe we may have collected information from a child under 13 may contact us at support@rombis.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version at rombis.ai and update the “Last Updated” date above. If we make a material change, we will provide additional notice, such as by email or a prominent notice on our website. Your continued use of the Service after the effective date of the updated policy indicates your acceptance of the updated policy.