Edge Checkout Privacy Notice
Version 2026-11-02 · effective 2 November 2026
https://edgecheckout.com/privacy

## 1. Who we are

Edge Checkout is provided by the company for your shipping country, which is the controller of your personal data:

- shipping address in the European Economic Area (EEA), the United Kingdom, Switzerland, Gibraltar, Guernsey, Jersey or the Isle of Man: **Zobi OÜ**, registry code 17551980, Maakri 23a, 10145 Tallinn, Estonia;
- everywhere else: **Valinor Partners Inc.**, 1007 N Orange Street, 4th Floor #5604, Wilmington, DE 19801, United States. Zobi OÜ runs the technical service for Valinor Partners Inc. as its processor.

Contact for both: privacy@edgecheckout.com.

The store whose checkout page you use helps collect your details for Edge Checkout. We are responsible for this notice and for answering your requests about Edge Checkout data.

This notice explains how we handle your data; it is information, not a contract. It covers Edge Checkout only. When you buy from a store, that store handles your order data under its own privacy policy. A store's own permission to charge a card you saved on its checkout page, for its own orders and subscriptions, is the store's, never part of Edge Checkout, and is covered by the store's privacy policy.

Stores also use our technology to run their checkout pages. Everything that page does for the store is done for the store, as its service provider, under the store's privacy policy, not this notice: taking your order and payment, offers after you pay, billing and emails for a subscription the store sells, checks against fraud and card testing (such as counting declined payments per internet address and email), and the store's own advertising and analytics tools and any code the store adds to the page. To measure the store's ads, those tools, and the events we send to the store's ad platforms (such as Meta, TikTok and Google) for the store, may receive what you do on the page, what you buy and pay, and your IP address and browser details. They never receive your card details, and when your browser sends a Global Privacy Control signal the page loads none of them and nothing is sent to the store's ad platforms. Only the details you choose to save with Edge Checkout are covered here.

## 2. What we collect

| Data | Where it comes from |
|---|---|
| Card: stored by our vault provider; we hold the card brand, last four digits, expiry, a fingerprint that recognises the same card, and references to the stored card | You, on the checkout page |
| Name, email, phone number, billing address, shipping address | You, on the checkout page |
| Record of your agreement: the exact wording shown, the terms version, the store, date and time, IP address and device | The checkout page |
| Which stores you bought from through Edge Checkout, and when | Your purchases |
| Your replies about Edge Checkout (YES, STOP) | Texts you send to a store |

You do not have to save your details with Edge Checkout. If you don't, you can still pay on the checkout page; you just can't buy by replying YES.

## 3. Why we use it, and our legal basis

| Purpose | Legal basis |
|---|---|
| Saving your details and letting a store charge your card when you reply YES | Where you ticked a box to save your details (shipping to the EEA, the United Kingdom, Switzerland, Gibraltar, Guernsey, Jersey, the Isle of Man or Canada): your consent, which you can withdraw at any time. Everywhere else: contract (these are the Edge Checkout Terms you agree to) |
| Checking your email before a charge | Contract, and our legitimate interest in preventing fraud |
| Keeping a card blocked after a payment dispute | Legitimate interest in preventing fraud |
| Keeping the record of your agreement | Legitimate interest in proving it, and the card networks' rules |
| Payment records | Legal obligation (accounting for the fees we bill stores), and our legitimate interest in answering payment disputes |

We use the details you save with Edge Checkout, and the record of your agreement, only to run Edge Checkout. We do not use them for advertising, we do not sell them, and we do not make automated decisions about you that have legal or similarly significant effects.

## 4. Who receives it

- **The store you reply YES to**, and its payment processor: your card, sent from the vault to the processor, and, if the store does not already hold them, your saved name, email and shipping address, for that order. From then on the store is responsible for that order data. If you saved your details at a store that uses Edge Checkout only for itself, no other store receives them.
- **Basis Theory, Inc.** (United States): stores your card and sends it to the store's payment processor.
- **DigitalOcean** (Netherlands): hosting.
- **Cloudflare, Inc.** (United States and worldwide): content delivery, network security and delivering emails sent to our addresses.
- **Messaging providers** that deliver texts, such as Blooio, SendBlue, AgentPhone and Twilio.
- **Resend, Inc.** (United States): sending our emails to you, such as notice of a change to the Edge Checkout Terms.
- **AI model providers** that read your replies to understand them (for example whether a reply is a YES): Anthropic, PBC (United States), and OpenRouter, Inc. (United States), which passes them to the model providers it routes to, including Anthropic and Google; and Langfuse (United States), when we use it to monitor those requests.
- Authorities, when the law requires it.

## 5. Transfers outside Europe

If your provider is Zobi OÜ: some recipients are in the United States, and we rely on the EU-US Data Privacy Framework where the recipient is certified, otherwise on the European Commission's Standard Contractual Clauses. If your provider is Valinor Partners Inc.: your data is processed in the United States and, by Zobi OÜ, in the EU. If you ship to Canada, your data is stored and processed outside Canada, in the United States and the EU, and courts and authorities there may be able to access it. Ask us for a copy of the safeguards.

## 6. How long we keep it

- **While you use Edge Checkout:** we keep your details, and delete a saved card 30 days after it expires. If your bank gives the card a new expiry date, the new date counts. A card saved without an expiry date is deleted 24 months after it was last saved or charged.
- **After you stop:** when you reply STOP (or ask in any words to stop texts) or email privacy@edgecheckout.com, your carrier tells us you opted out, or you unsubscribe from a store's emails with the email tied to your phone, Edge Checkout turns off for good. From then no store can charge your saved card, and we delete it 30 days later.
- **If you dispute a charge:** Edge Checkout pauses for your phone number until you save a card again at a later purchase, and we delete your other saved cards 30 days later. The disputed card is kept (below).
- **If you ask us to delete them:** email privacy@edgecheckout.com and we delete your saved cards promptly, and within one month at the latest, and, on the store's behalf as its service provider, remove your email and addresses from our checkout records, except what a store still needs to answer a payment dispute.

What we delete from a saved card: the stored card (its token at our vault provider), your name, billing address and the link to your email address. Your saved email and addresses go within a day of your last saved card.

Checkout records (your email, shipping and billing address and IP address for that order) are kept for the store and deleted 90 days after the order, or 180 days at some stores, where they are evidence for a payment dispute, or later while a subscription you bought with that order is active.

What we keep, and why:

- **With the record of each payment** (which store, when, how much): your phone number and your card's last four digits, card brand and expiry, for accounting and to answer payment disputes, until 7 years after the end of the year of the payment.
- **Your STOP record:** your phone number and when you stopped, for as long as Edge Checkout must stay off for it.
- **Your replies** (YES, STOP): kept with the store's conversation under the store's privacy policy.
- **The record of your agreement** (the wording shown, date and time, IP address, device, store and card): for 18 months after your card is deleted, so a store can answer a card dispute, then deleted.
- **A card involved in a payment dispute:** kept until 18 months after the dispute, to prevent fraud, then deleted.
- **A card a store subscription still charges:** kept for that store, as its service provider and under its privacy policy, until the subscription ends, then deleted. Deleting your Edge Checkout details does not cancel the subscription; cancel it with the store.

The store you bought from keeps its own copy of your order under its own privacy policy. Deleting your Edge Checkout details does not delete that copy; ask the store.

## 7. Security

Your card is stored by a card vault provider validated as compliant with PCI DSS at Level 1; our systems never hold your full card number or security code. We protect the rest of your data with technical and organisational measures, including encryption in transit and access limited to the people who need it. No system is completely secure; if a breach affects your data, we will tell you and the authorities as the law requires.

## 8. Your rights

You can ask to access, correct, delete or receive a copy of your data, to restrict its use, or object to it. Where we rely on your consent, you can withdraw it at any time by replying STOP or by email; this does not affect purchases you already made. Email privacy@edgecheckout.com; we answer within one month, and carry out a request to delete your details promptly. We reply within one month.

If your provider is Zobi OÜ, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the data protection authority where you live. In Canada, you can complain to the Office of the Privacy Commissioner of Canada.

## 9. California residents: notice at collection

- **Categories collected:** identifiers (name, email, phone, address); financial information (card stored by our vault provider; card brand, last four digits, expiry); commercial information (which stores you bought from); internet activity (IP address and device at sign-up).
- **Purposes:** as in section 3.
- **Sources:** as in section 2.
- **Disclosed for a business purpose in the past 12 months:** identifiers and financial information to our vault, hosting, network-security, email, messaging and AI providers named in section 4; identifiers, financial and commercial information to the store you reply YES to.
- **Sold or shared:** we do not sell your personal information or share it for cross-context behavioural advertising. We treat a Global Privacy Control signal as a request to opt out of both. When a store receives your details after you reply YES, that is a disclosure you direct. We have no actual knowledge of selling or sharing personal information of anyone under 16. A store's own ad tracking on its checkout page is the store's, under its privacy policy (section 1).
- **Sensitive personal information:** we do not store your card's security code, and we do not use any data to infer characteristics about you.
- **Retention:** as in section 6.
- **Your rights:** to know, access, correct and delete, and not to be discriminated against for using them. Email privacy@edgecheckout.com. You may use an authorised agent. We verify a request by matching it to the phone number and email we hold for you.

## 10. Other US states

If you live in a US state with a consumer privacy law, you have similar rights to access, correct and delete your data. Email privacy@edgecheckout.com. If we refuse a request, you can appeal by replying to our answer. If we turn down your appeal, you can contact your state's Attorney General.

## 11. Children

Edge Checkout is not for anyone under 18.

## 12. Changes

We will tell you before a significant change to this notice.

## 13. Contact

Zobi OÜ, Maakri 23a, 10145 Tallinn, Estonia · Valinor Partners Inc., 1007 N Orange Street, 4th Floor #5604, Wilmington, DE 19801, United States · privacy@edgecheckout.com