ResaleOS Payment Processor App: Privacy Policy

Effective date: November 5, 2026

This policy explains how Palm Delivery Innovations QOZB, LLC (doing business as ResaleOS) ("ResaleOS", "we") handles information when a merchant uses the ResaleOS app from a third-party payment processor's app marketplace (the "App"). Everything else ResaleOS does is covered by our main Privacy Policy.

We process this information only on the merchant's behalf and for the merchant's benefit.

1. Information we collect from the payment processor

  • Merchant ID and OAuth access/refresh tokens: to connect your payment processor account and keep the connection working
  • Your devices (ID, name, model): so you can choose which device takes a payment
  • Orders and line items we create (item name, price, quantity): to send the sale to the device
  • Payment status, amount, card brand and last four digits: to mark the sale paid in ResaleOS and show which card was used on the receipt and in reports

We do not collect full card numbers, expiry dates, CVV, PINs or cardholder names; the payment processor handles those. We do not access the payment processor's customer records, employee records, inventory or loyalty data.

2. How we use it

Only to provide the App: sending sales to your device, recording the result in ResaleOS, and keeping your sales history and reports accurate. We do not sell this information, use it for advertising, or combine it with data from other merchants.

Artificial intelligence. No information received from the payment processor is sent to an artificial-intelligence provider, and none of it is used to train or improve any model.

3. Sharing

We share payment processor information only with:

  • the service providers that host ResaleOS (Vercel, MongoDB Atlas and Railway), under contracts that limit their use to running our service;
  • authorities, where the law requires it.

4. Security

Data is encrypted in transit (TLS) and at rest. Payment processor tokens are stored server-side only, are never shown in the browser, and expire and refresh under the processor's OAuth flow. Access to production data is limited to staff who need it.

5. Retention

Payment processor tokens are deleted as soon as you disconnect the processor or uninstall the App. Sale records, including the card brand and last four digits, stay in your ResaleOS account until you delete them or close your account, as described in our main Privacy Policy.

6. Your rights and your customers' rights

You can access, export, correct or delete your data from ResaleOS, or by writing to info@resaleos.co.

California (CCPA). We act as your service provider. We do not sell or share personal information as those terms are defined in the CCPA.

Canada (PIPEDA and Quebec Law 25). Our person in charge of the protection of personal information is our Privacy Officer, info@resaleos.co. Data is stored and processed in the United States.

Europe (GDPR). Where the GDPR applies, you are the controller and we are your processor.

7. Changes

We will notify you by email at least 30 days before any material change to this policy.

8. Contact

Palm Delivery Innovations QOZB, LLC (doing business as ResaleOS), 4901 East Cesar Chavez Street, Austin, TX 78702, USA · info@resaleos.co