1. Purpose of This Policy & Company Information
This Privacy Policy explains how We collect, use, disclose, and safeguard Your information when You use the BillPay Rewards platform (the “Platform”). By using the Platform, You agree to the terms of this Privacy Policy.
The Platform and related services are owned and operated by:
EonX Services Corporation
Registered in South Dakota, USA
Email: privacy@eonx.com
2. Information We Collect
We collect the following categories of information:
A. Identity & Contact Information
- Business name and address
- Authorized representative’s name
- Email address and phone number
B. Verification & Compliance Information (KYC/AML/OFAC)
- Government-issued identification documents
- Tax identification numbers
- Bank account details for ACH/card processing
- Incorporation certificates and business licenses
- Ownership details and beneficial ownership structure
C. Transaction Information
- ACH, debit, and credit card transaction data
- Payment history, chargebacks, and reversals
- Rewards earning and redemption activity
D. Device & Usage Information
- IP address, browser type, device identifiers
- Platform usage logs for fraud prevention
- Session timestamps and security monitoring data
3. Why We Collect This Information
We process Your data for:
✔ Payment Processing (ACH, debit, credit)
✔ Regulatory Compliance (KYC, AML, OFAC, NACHA, Card Schemes)
✔ Fraud Detection & Prevention
✔ Rewards Program Administration
✔ Platform Security and Risk Management
✔ Customer Support and Service Communication
4. Legal Basis for Processing
- Contractual Necessity: To provide payment and rewards services
- Legal Obligation: To comply with AML, OFAC, NACHA, UCC Article 4A, Visa/Mastercard BPSP/BPA rules
- Legitimate Interest: Fraud detection, dispute resolution, and compliance enforcement
- Consent: For optional marketing communications (where required by law)
5. How We Use Your Information
We use Your data to:
✔ Execute ACH and card transactions
✔ Verify Your identity and meet regulatory obligations
✔ Provide transaction confirmations and status updates
✔ Maintain transaction and audit logs for a minimum of 5 years
✔ Monitor fraud and suspicious activity
✔ Support legal investigations and chargeback disputes
6. How We Share Your Information
We do not sell Your data. We share only as necessary:
- Payment Networks & Banks: For ACH and card processing
- Regulators & Law Enforcement: For AML/OFAC compliance or legal obligations
- Verification Vendors: For identity, sanctions, and fraud checks
- Service Providers: Hosting, infrastructure, cybersecurity, under strict confidentiality agreements
- Loyalty Partners: To fulfill rewards redemptions (airlines, hotels, gift card merchants)
7. International Data Transfers
Your data may be processed outside the U.S. with safeguards including:
✔ Encryption during transfer
✔ Access control policies
✔ Standard Contractual Clauses (GDPR compliance)
8. Data Retention
- We retain transaction and identity data for at least 5 years post-account closure, as required by AML and banking laws.
- Dispute-related data, including chargebacks, may be retained longer for regulatory defense.
- Marketing and non-essential data is purged when legally permissible.
9. Data Security
We employ industry-leading security measures:
✔ PCI DSS Level 1 Certified
✔ SOC 2 Type II Audited
✔ ISO 9001 & ISO 27001 Compliant
✔ Encryption (data in transit and at rest)
✔ Multi-factor authentication and role-based access
Breach Disclaimer: While We take robust security measures, We are not liable for breaches caused by factors beyond Our control.
10. Your Rights
Subject to applicable law, You may:
✔ Access and correct Your personal data
✔ Request deletion where permissible
✔ Opt out of marketing communications
✔ Request a copy of Your data (data portability)
Contact privacy@eonx.com for such requests.
11. GDPR Compliance (EU Residents)
- We process Your data lawfully under GDPR Articles 5–6.
- Rights: Access, rectification, erasure, restriction, objection, portability.
- Complaints: Contact Your local supervisory authority.
12. CCPA Compliance (California Residents)
California residents have rights under CCPA, including:
✔ Right to know what data We collect
✔ Right to request deletion (except for legal obligations)
✔ Right to opt out of data sale (We do not sell data)
Submit CCPA requests to privacy@eonx.com.
13. Children’s Privacy
The Platform is strictly for registered businesses. We do not knowingly collect data from individuals under 18.
14. Chargebacks, Fraud & Dispute Data
In the event of disputes, We retain relevant data, including:
- IP logs, payment fingerprints
- ACH authorizations and card chargeback documentation
- Communications with banks and regulators
This data is retained for compliance and enforcement purposes.
15. Rewards Program Clarification
BillPay Rewards Points:
✔ Issued free as a promotional incentive
✔ Have no monetary value and cannot be purchased or redeemed for cash
✔ Do not constitute stored value or property
✔ Subject to forfeiture upon termination (See Terms & Conditions Section 11)
16. Marketing & Communication
By using the Platform, You consent to electronic communications for service notifications and compliance purposes.
You may opt out of marketing at any time without affecting core services.
17. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or Platform notice. Continued use constitutes acceptance.
18. Contact Us
privacy@eonx.com
EonX Services Corporation, 101 S. Reid Street, Suite 307, Sioux Falls, South Dakota, USA
Tel: +1 803 676 7776
