MMJPay does not sell your personal or business information. This policy reflects the unique regulatory environment of cannabis payment processing, including FinCEN, BSA, and applicable state cannabis regulations.
1. Information We Collect
Information you provide:
- Business name, address, and contact information
- Owner and authorized representative identification (required by FinCEN/BSA)
- Bank account and routing information for settlement
- State cannabis license numbers and supporting documentation
- Tax identification numbers (EIN/SSN)
- Processing volume estimates and business history
Information collected automatically:
- Transaction data including amounts, timestamps, card types, and terminal identifiers
- Device and browser information when accessing the merchant portal
- IP addresses and approximate geolocation
- Usage logs and session activity
2. How We Use Your Information
- Processing and settling payment transactions
- Underwriting and onboarding new merchant accounts
- Fulfilling regulatory obligations including BSA/AML reporting requirements
- Communicating with you about your account, transactions, and service updates
- Detecting and preventing fraud, chargebacks, and suspicious activity
- Improving our services, technology, and customer support
- Complying with lawful requests from regulators, law enforcement, and banking partners
3. Sharing of Information
- Banking partners: As required for payment processing and account underwriting.
- Card networks: Transaction-level data for settlement and dispute resolution.
- Regulatory bodies: We are required to file SARs and CTRs with FinCEN under the Bank Secrecy Act. These filings are confidential and cannot be disclosed to the subject.
- Service providers: Vendors contractually bound to protect your data.
- Legal compliance: In response to lawful subpoenas, court orders, or governmental requests.
4. Data Retention
We retain merchant and transaction records for a minimum of seven (7) years following account closure, consistent with BSA/AML requirements and applicable state cannabis regulations.
5. Data Security
MMJPay maintains a PCI DSS Level 1 certified environment with end-to-end encryption, tokenization of cardholder data, role-based access controls, and 24/7 security monitoring. See our Security page for full details.
6. Your Rights
Depending on your state of residence, you may have the right to access, correct, or request deletion of your personal information. Contact [email protected] to exercise your rights.
7. Cookies
See our Cookie Policy for details on how we use cookies and how to manage your preferences.
8. Cannabis Industry Notice
Cannabis remains a Schedule I controlled substance under federal law. MMJPay operates under heightened regulatory scrutiny including mandatory FinCEN SAR filing obligations. By using our services, you consent to the data practices required to maintain compliant cannabis payment processing, including regulatory filings we are legally prohibited from disclosing to you.
9. Changes to This Policy
We will notify you of material changes via email or merchant portal notice prior to the change taking effect.
10. Contact Us
Email: [email protected] | Phone: 1-800-279-1455