1. Introduction
RiseUp Payments is operated by RiseUp Digital PH / RiseUp Payments. We provide software, integration, merchant dashboard, onboarding, and support services for Philippine businesses that want to connect supported payment methods with GoHighLevel-powered checkout, forms, invoices, customer records, and automation workflows.
We respect your privacy and are committed to protecting personal information in accordance with applicable Philippine data privacy requirements, including the Data Privacy Act of 2012, its implementing rules and regulations, and related guidance from the National Privacy Commission where applicable.
This Privacy Policy explains what information we collect, how we use it, when we share it, how we protect it, and the rights available to individuals whose personal information may be processed through our platform.
2. Scope of this Privacy Policy
This Privacy Policy applies to personal information processed through RiseUp Payments websites, merchant dashboard, checkout-related pages, onboarding forms, support channels, payment status synchronization, and related platform services.
This Policy may apply to information from merchants, merchant team members, customers, prospects, website visitors, and other individuals who interact with RiseUp Payments or with payment flows powered by RiseUp Payments.
Separate privacy notices or third-party policies may apply when you use external platforms, payment providers, GoHighLevel, banks, e-wallets, card networks, communication tools, hosting providers, or other third-party services connected to the platform.
3. Information We Collect
Merchant and Account Information
When a business signs up, connects an account, requests onboarding, or uses the merchant dashboard, we may collect information such as:
- Name, business name, role, and contact details.
- Email address, phone number, billing contact, and support contact information.
- Business profile information needed for onboarding, support, verification, or integration setup.
- GoHighLevel location, account, or integration identifiers required to connect and sync payment activity.
- Xendit or payment provider configuration details that merchants choose to connect to the platform.
Customer and Transaction-Related Information
When a merchant uses RiseUp Payments for checkout, order forms, invoices, or payment status tracking, we may process customer-related information on behalf of the merchant, such as:
- Customer name, email address, phone number, and billing details provided through the checkout or business flow.
- Transaction reference numbers, payment status, amount, currency, payment channel, and timestamps.
- Order, invoice, form, or checkout metadata required to connect payment status with merchant records and workflows.
- Limited webhook, API, and transaction logs needed for troubleshooting, security, reconciliation, and platform reliability.
Technical and Usage Information
We may automatically collect technical information when users access our website or platform, including:
- IP address, browser type, device information, operating system, and approximate location derived from technical data.
- Log files, access times, error logs, security events, and usage activity within the merchant dashboard.
- Cookie identifiers, session information, and analytics data where applicable.
4. How We Use Information
We use personal information only for legitimate business, platform, security, compliance, and support purposes. These may include:
- Providing, operating, maintaining, and improving RiseUp Payments services.
- Creating and managing merchant access to the platform and dashboard.
- Connecting payment flows, transaction status updates, and merchant records.
- Syncing payment status back to connected business systems where configured.
- Supporting workflow triggers, customer follow-ups, notifications, and payment-related automations.
- Providing onboarding, technical support, account support, troubleshooting, and service communications.
- Detecting, preventing, and responding to fraud, abuse, unauthorized access, security incidents, and system misuse.
- Maintaining logs, reports, audit trails, and operational records needed for platform reliability and dispute resolution.
- Complying with applicable laws, regulations, lawful requests, provider requirements, and contractual obligations.
5. Payment Processing and Platform Role
RiseUp Payments acts as a software integration and merchant dashboard platform. We help merchants connect supported payment methods, track payment status, and automate business actions after payment events.
RiseUp Payments is not a bank, financial institution, lender, remittance company, e-wallet provider, payment processor, or custodian of customer funds.
Payment processing is performed by approved third-party payment providers such as Xendit and other supported payment partners. Those providers may collect and process payment-related data according to their own terms, privacy policies, security standards, and compliance requirements.
RiseUp Payments does not:
- Hold, receive, store, or custody customer funds.
- Act as the merchant’s bank, wallet, remittance provider, or payment processor.
- Collect full card details, wallet passwords, bank login credentials, or sensitive payment authentication information.
Payment method availability may depend on merchant eligibility, business verification, payment provider approval, risk review, regulatory requirements, payment channel availability, and third-party provider policies.
6. GoHighLevel and Third-Party Integrations
RiseUp Payments may connect with GoHighLevel and other third-party systems to support checkout, transaction tracking, payment status synchronization, workflow triggers, customer record updates, reporting, notifications, and related business processes.
When a merchant authorizes an integration, we may process the data necessary to perform the requested connection, including location identifiers, transaction references, customer information, payment status, order information, automation-related data, and relevant API logs.
Merchants are responsible for ensuring that their use of connected platforms, customer data, automations, messages, forms, and workflows complies with applicable laws, customer notices, consent requirements, and third-party platform rules.
7. Sharing of Information
We do not sell personal information. We may share information only when necessary to provide the services, operate the platform, comply with legal obligations, protect security, or support merchant-requested integrations.
Information may be shared with:
- Payment providers, such as Xendit or supported payment partners, to facilitate payment flows, status updates, settlement-related reporting, and fraud prevention.
- Technology and infrastructure providers, including hosting, database, monitoring, logging, storage, and cloud service providers.
- Business platform providers, including GoHighLevel and connected tools authorized by the merchant.
- Communication and support providers used for email, notifications, onboarding, customer support, and account communications.
- Professional advisers, such as legal, accounting, compliance, or technical advisers where reasonably necessary.
- Government authorities or legal parties when required by law, lawful request, court order, regulatory requirement, or to protect rights, safety, and security.
Where we use service providers, we take reasonable steps to require them to process information only for authorized purposes and with appropriate confidentiality and security measures.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, contract, security needs, audit requirements, dispute resolution, fraud prevention, or legitimate business operations.
Transaction records, payment status logs, integration logs, support history, and account records may be retained to support merchant reporting, troubleshooting, reconciliation, legal compliance, and service reliability.
When information is no longer needed, we take reasonable steps to delete, anonymize, archive, or restrict access to it in accordance with operational, legal, and security requirements.
9. Security Measures
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction.
These safeguards may include:
- Access controls and role-based restrictions.
- Authentication and credential protection.
- Encrypted connections where appropriate.
- System monitoring, logging, and security event review.
- Least-privilege access practices for platform administration.
- Operational controls for API credentials, webhooks, and integration-related secrets.
- Periodic review of platform access, logs, and configuration.
No online system can guarantee absolute security. Merchants and users are responsible for protecting their own login credentials, restricting internal access, configuring integrations carefully, and notifying us promptly if they suspect unauthorized access or misuse.
10. International Data Transfers
Some third-party providers, infrastructure services, payment partners, and business platforms connected to RiseUp Payments may process, store, or access information outside the Philippines.
When information is transferred or processed internationally, we take reasonable steps to ensure that such processing is performed for legitimate purposes and with appropriate safeguards, subject to the policies, locations, and security practices of the relevant third-party providers.
By using RiseUp Payments and authorizing connected services, merchants acknowledge that information may be processed in jurisdictions where our providers or integration partners operate.
11. Your Privacy Rights
Under the Data Privacy Act of 2012, data subjects may have rights regarding their personal information, subject to applicable exceptions and verification requirements.
These rights may include:
- The right to be informed about the collection and processing of personal information.
- The right to access personal information held about you.
- The right to object to certain processing activities where applicable.
- The right to request correction of inaccurate or outdated personal information.
- The right to request deletion, blocking, or removal where legally applicable.
- The right to data portability where applicable and technically feasible.
- The right to lodge a complaint with the appropriate privacy authority.
If you are a customer of a merchant using RiseUp Payments, we may process your information on behalf of that merchant. In many cases, privacy requests should first be directed to the merchant that collected your information or provided the checkout, form, invoice, or service.
We may need to verify your identity, authority, or relationship to the relevant merchant before responding to certain requests.
12. Cookies and Analytics
Our website, dashboard, and platform may use cookies, session storage, log files, and similar technologies to support essential functionality, security, analytics, performance monitoring, and user experience improvements.
These technologies may be used to:
- Keep users signed in and maintain secure sessions.
- Remember basic preferences or dashboard state.
- Measure website and platform performance.
- Detect errors, abuse, suspicious activity, or unauthorized access attempts.
- Understand which pages or features are useful to users.
You may control cookies through your browser settings. However, disabling certain cookies may affect platform functionality, login sessions, security features, or dashboard performance.
13. Children’s Privacy
RiseUp Payments is intended for business use and is not directed to children or minors. We do not knowingly collect personal information from children for marketing or account registration purposes.
If we learn that a child’s personal information has been provided to us without appropriate authority or lawful basis, we will take reasonable steps to delete or restrict the information where required.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, business operations, legal requirements, provider requirements, or privacy practices.
When we make material changes, we may provide notice through our website, dashboard, email, or other reasonable communication channels. The updated version will indicate the latest revision date.
Continued use of RiseUp Payments after an updated Privacy Policy becomes effective means you acknowledge the updated Policy.
15. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or how RiseUp Payments handles personal information, you may contact us:
RiseUp Payments
Operated by RiseUp Digital PH
Philippines
Email: [email protected]