Skip to content

Privacy Policy

Effective Date: April 25, 2025

GAM Payments, LLC d/b/a WrenchPay (“WrenchPay,” “we,” “us,” or “our“) is committed to protecting your privacy. This Privacy Policy explains what personal information we collect through our website WrenchPay.com and any related products or services (collectively, the “Services“), how we use it, with whom we share it, and the choices you have.

1. Who We Are

Controller / Business GAM Payments, LLC d/b/a WrenchPay
Address 5355 Town Center Road #205D, Boca Raton, FL 33486 USA
Email [email protected]
Phone +1 (954) 320‑0766
Data Protection Officer Taylor Hendricksen

 

2. Information We Collect

We collect different categories of personal information depending on whether you are a website visitor, sales lead, or merchant:

  • Visitors: device and usage data (IP address, browser type, device identifiers, cookies, analytics data) and marketing preferences.
  • Leads: contact data (name, email, phone, physical address), device and usage data, and marketing preferences.
  • Merchants: identity and company data (name, EIN, SSN, driver’s license), contact data, financial and transaction data (bank accounts, card information, settlement details), device and usage data, and marketing preferences.

We do not knowingly collect personal information from children under 13 years of age.

 

3. How We Collect Data

  • Directly from you — information you provide via web forms, onboarding portals, email, or phone.
  • Automatically — information collected through cookies, SDKs, and similar tracking technologies.
  • Third‑party sources — KYC/AML databases, fraud‑screening services, and other service providers.
  • Public sources — government licensure records and corporate filings.

 

4. Why We Process Your Data

Purpose Examples
Payment execution & settlement Processing card and ACH transactions and sending funds to your designated bank account.
KYC / AML verification Identity checks required by law and card‑brand rules.
Fraud detection & risk scoring Monitoring transactions to prevent fraud and protect the payment ecosystem.
Marketing communications Sending emails or SMS when you opt in.
Product analytics & improvement Understanding how you use the Services to enhance features and user experience.
Regulatory reporting & bookkeeping Meeting obligations under applicable financial and tax laws.

 

5. How We Share Information

We share personal information only as necessary to provide the Services or as required by law. Typical recipients include:

  • Card networks (Visa, Mastercard, Discover, American Express)
  • Acquiring banks and processors (e.g., Fiserv)
  • KYC/AML and fraud‑prevention providers (e.g., Alloy, Socure)
  • Cloud‑hosting providers (e.g., AWS) with PCI DSS & SOC 2 controls
  • CRM and email platforms (e.g., HubSpot, Mailgun) for opted‑in marketing
  • Analytics vendors (e.g., Google Analytics 4, Hotjar)

We do not sell or share personal information for cross‑context behavioral advertising.

 

6. International Data Transfers

All systems are hosted in secure data centers located in the United States. We do not routinely transfer personal information outside the U.S.

 

7. Data Retention & Deletion

Data Category Retention Period
Merchant financial & KYC records 7 years after account closure
Transaction logs 7 years
Marketing contact data 3 years from last interaction
Visitor analytics data 12 months
Security logs 30–90 days

Upon expiration, data is deleted or anonymized unless a longer period is required by law.

 

8. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, as well as to opt out of certain processing. To exercise your rights, contact us using the details in Section 13. We will verify your identity and respond within the time frames required by applicable law.

We honor browser‑level Global Privacy Control (GPC) signals for visitors until you actively submit information via an online form.

 

9. Security Measures

We maintain administrative, technical, and physical safeguards designed to protect personal information, including:

  • PCI DSS v4.0 compliance (tokenization, strong encryption, secure network architecture)
  • SOC 2 Type II audited controls
  • TLS 1.3 encryption for data in transit
  • Multi‑factor authentication and role‑based access
  • Continuous monitoring and regular penetration testing

 

10. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Services. You can manage or disable cookies in your browser settings; however, some features may not function properly without them.

Tool Purpose Typical Lifespan
Google Analytics 4 Site usage statistics Up to 14 months
Hotjar User experience heat‑mapping 12 months
HubSpot Lead attribution & marketing automation 13 months

 

11. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them.

 

12. Updates to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (e.g., via banner or email) at least 15 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.

 

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at:

Email: [email protected]
Phone: +1 (954) 320‑0766
Mail: GAM Payments, LLC — WrenchPay
5355 Town Center Road #205D
Boca Raton, FL 33486 USA

Governing law: State of Delaware, USA

Ready to Stop Donating $10,000s/year to the 3rd Vacation Home Fund of Some Big Corporation Exec?