Privacy policy

1. Controller

DRAXEN LLC, 8110 Opportunity View, Colorado Springs, CO 80939, United States, is responsible for the personal data described here. Write to contact@draxen.club with any question.

2. Visitors to this website

This website sets no analytics or advertising cookies. The contact form opens your own email application with a message addressed to us; we receive only what you choose to send. Our hosting provider keeps standard server logs (IP address, time, page requested) for security, which are deleted on a rolling basis.

3. Merchants and their staff

When you open an account we collect what is needed to create it and to pass to the payment partner for its own onboarding: the business's identity and contact details, those of its representatives, and tax information. Bank details for payouts are collected and held by the payment partner under its own privacy terms, not by DRAXEN. We use the data in our possession to provide the software, to screen for fraud, to meet legal obligations and to communicate with you about your account.

4. Your customers' data and the merchant CRM

Each payment you accept generates data about your customer: name, email address, country, a masked payment method, order amounts and the status of orders, refunds, disputes and payout statements. That data populates the merchant CRM, together with any notes and tasks you add.

We process this data on your behalf and on your instructions. You are responsible for your customers' data, for informing them and for responding to their requests; we assist you in doing so. We use the data only to provide the software to you, to screen for fraud and to meet our legal obligations. Full card numbers are handled by the payment partner's PCI DSS compliant processing and are not stored by DRAXEN.

5. Who receives data

We share data with the regulated third-party payment providers and acquiring partners that process payments, hold funds and make payouts (which DRAXEN itself never does), with the providers that host our infrastructure, and with authorities where the law requires. We do not sell personal data.

6. Security and retention

Data is encrypted in transit over TLS and at rest with 256-bit AES. Account and transaction records are kept for as long as needed to provide the software and to meet record-keeping obligations, then deleted or anonymised. CRM records are deleted or returned when your account closes, at your choice.

7. Your rights

Depending on where you are, you may have the right to access, correct, delete or export your personal data, or to object to some processing. Write to contact@draxen.club. If you are a customer of a business that uses DRAXEN, contact that business first; we will help it respond.

8. Changes

We may update this policy; the current version is always this page. See also the cookie policy.