Privacy policy

Effective date: August 25, 2026

1. Overview

This policy explains what Disputeless ("we", "us") collects, how we use it, and the choices you have. The short version: we collect what we need to run a chargeback prevention service, we do not sell personal information, and every integration is read with the minimum access required.

2. What we collect

• Contact information you provide, such as your name and work email when you book a call or contact us.
• Business and transaction data from integrations you connect (payment processors, billing platforms, storefronts), limited to what is needed to detect, deduplicate, and resolve disputes: transaction identifiers, amounts, dispute records, and related customer records such as masked card details.
• Basic usage data about how the website and dashboard are used, for security and product improvement.

On the marketing website we also collect standard analytics through Google Analytics 4: pages viewed, approximate location by country or city, and the referring site. This is aggregate measurement, not advertising, and the cookie policy explains how to opt out.

3. What we do not do

• We do not sell personal information.
• We do not use your merchant data to advertise to your customers.
• We do not share data across merchants; your data is used to serve your account.

4. How we use information

To deliver alerts and the intelligence layer, deduplicate disputes across networks, bill accurately, provide support, secure the platform, and improve the product. Aggregated, de-identified statistics (for example, industry dispute benchmarks) never identify a merchant or cardholder.

5. Sharing

We share data only with: card network alert systems and their operators, as required to deliver and resolve alerts; service providers that host and operate our infrastructure, scheduling, email, and website analytics under contractual confidentiality; and authorities where the law requires it. Each provider receives only what it needs.

6. Legal bases, for visitors in the EEA and the UK

If you are in the European Economic Area or the United Kingdom, data protection law requires us to have a legal basis for using your information. Ours are:

• Performance of a contract: running the service for customers who have signed up for it, including processing dispute and alert data on their instruction.
• Legitimate interests: keeping the website working, measuring aggregate traffic so we know which pages are useful, securing our systems, and preventing fraud and abuse. You can object to processing based on legitimate interests at any time, and for website analytics you can also simply block the cookies.
• Legal obligation: card network rules, tax, and accounting requirements.
• Consent: anything we specifically ask you to opt into, such as marketing email. You can withdraw consent at any time, and withdrawing it does not affect what came before.

7. Retention

We keep account and dispute records while your account is active and as needed for legal, billing, and audit purposes, then delete or de-identify them. You can request deletion earlier; some records must be retained where the law requires.

8. Security

Data is encrypted in transit, access is limited to personnel who need it, and integrations use scoped, revocable credentials. No system is perfectly secure; we will notify affected merchants of a breach as required by law.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal information, and to object to or restrict certain processing. Contact us at hello@disputeless.com and we will respond within the timelines the applicable law requires, which in the EEA and the UK is normally one month.

You never have to justify a request, and we will not charge you for one or treat you differently for making it. If you are unhappy with how we handle it, you have the right to complain to your local supervisory authority: in the UK that is the Information Commissioner\u2019s Office, and in the EEA it is the authority in the country where you live or work.

10. International transfers

We are based in the United States and process data there, so information from the EEA or the UK is transferred outside your country. Where that happens we rely on the European Commission\u2019s Standard Contractual Clauses, together with the UK International Data Transfer Addendum for UK data.

Our providers are bound by the same kind of terms. Website analytics runs on Google Analytics 4 under Google\u2019s data processing terms, which incorporate those clauses.

11. Children

The services are for businesses and are not directed to children. We do not knowingly collect information from anyone under 16.

12. Changes

We may update this policy. Material changes will be posted here with a new effective date.

13. Contact

Privacy questions and requests: hello@disputeless.com.