Privacy Policy

Immersive Studio OÜ (registry code 16632179), Harju maakond, Tallinn, Kesklinna linnaosa, Valge tn 13, 11415, Estonia, is the controller of personal data processed through payes.to and in connection with business relationships. For transaction data processed on behalf of merchants, we act as a processor and the merchant is the controller. Contact: support@payes.to.

• Contact and business data you submit (name, company, work email, vertical, volume).
• KYB/KYC data about merchants, directors and beneficial owners.
• Transaction and device data processed for routing, fraud prevention and compliance.
• Technical data such as IP address, browser type and usage logs.

• Providing the Services and performing contracts (Art. 6(1)(b) GDPR).
• Complying with AML/CFT, sanctions and accounting obligations (Art. 6(1)(c)).
• Fraud prevention, security and improving our products (Art. 6(1)(f)).
• Marketing communications, where you consented (Art. 6(1)(a)).

We share data with acquirers, payment institutions, banks, card schemes, KYC and fraud-screening vendors, hosting providers and authorities where legally required. All processors are bound by data processing agreements.

Where data is transferred outside the EEA, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses with supplementary measures.

AML-related records are kept for at least five years after the end of the business relationship as required by Estonian law. Marketing enquiries are kept for up to 24 months unless a relationship is established.

Card data is tokenised in a PCI-DSS Level 1 environment. We apply encryption in transit and at rest, access controls and continuous monitoring.

You may request access, rectification, erasure, restriction, portability, or object to processing by emailing support@payes.to. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

We use strictly necessary cookies to operate the site and, with your consent, analytics cookies to understand usage.

We may update this policy; the "last updated" date above reflects the latest version.