Privacy policy
Last updated 17 August 2026
Nilfpay lets someone who makes or sells things from home — a baker, a crafter, a reseller — take prepaid orders for local pickup or delivery. This policy covers the Nilfpay seller app and the storefront pages buyers order from. It says what we collect, why, and how to make us delete it.
Who we are
Nilfpay is operated from the United States. Questions about this policy or your data: [email protected].
If you sell on Nilfpay
What we collect
| What | Why |
|---|---|
| Name and email address | To create your account, sign you in, and send you receipts and sale notifications. |
| Shop name, description, category, ZIP code, pickup details | To build the storefront your buyers order from. |
| Photos you upload of your products and your shop logo | To show them on your storefront. Photos are sent to our AI provider to suggest a name, description and price — see below. |
| Bank routing and account number | To pay you. We show only the last four digits back to you, and we email you whenever they change. |
| Order and payment history | To run your shop, settle your money, and meet US financial recordkeeping rules. |
| Notification token, if you install the app and allow notifications | To tell your phone a buyer paid. Detached when you sign out. |
| Basic technical logs (IP address, error reports) | Security, abuse prevention, and fixing crashes. |
What we do not do
- We do not sell your data, and we do not share it with advertisers or data brokers.
- We do not track you across other apps or websites.
- We do not run advertising in the app.
- We never see or store your full card number — the payment processor handles that directly.
If you buy from a Nilfpay shop
You do not need an account and you do not need to install anything. When you order we collect your email address (to send your receipt and a link to track your order), your name and any note you add, and the details of what you ordered. If you choose delivery, we also collect the delivery address you enter, so the seller can ship or bring your order to you. Your card details go straight to our payment processor; Nilfpay never receives them.
The seller you ordered from can see your name, email address, note, order, and delivery address if you gave one — they need it to prepare your order and get it to the right person. If you tick the box to follow the shop, the seller can also email you when they post something new. Every one of those emails has an unsubscribe link, and following is never required to place an order.
Who we share it with
We use a small number of companies to run the service. They may only use what we send them to do the job we hired them for.
- Payment processing — to take card payments and pay sellers out.
- Cloud hosting and databases — to run the service and store its data. Hosted in the United States.
- File and image storage — for the photos you upload.
- Email delivery — for receipts, sale notifications and sign-in links.
- Push notification delivery — Google Firebase Cloud Messaging, for the app's order alerts.
- AI processing — Anthropic, to turn a product photo into a suggested listing and to draft descriptions and captions. Your photo and the text you asked for help with are sent for that purpose. It is not used to train their models.
- Error monitoring — to find and fix crashes.
We will also disclose information if the law requires it, or to protect against fraud or abuse.
Advertising measurement
We advertise on Google, and we measure whether those ads work. Our website analytics is Plausible, which is cookieless and collects no personal data. For ad measurement specifically:
- Google Ads cookies. Our pages load the Google tag, which may set cookies used to measure conversions from Google ads.
- Click identifiers. If you arrive from a Google ad, the click carries an identifier (a GCLID or similar). We store it in a cookie and, if you open a shop, on your seller record, and use it to attribute later signups and sales back to the ad. It identifies a click, not a person.
- Hashed email. To measure ad effectiveness (Google's Enhanced Conversions), a one-way hashed (SHA-256) version of your email may be shared with Google. The raw email address is never sent to Google.
- Server-side reporting. Signup and sale conversion reports are uploaded to Google through a marketing service operated by our corporate group. No advertising credentials live on this website, and nothing beyond the click identifier, timestamps, order values and the hashed identifier above is shared for this purpose.
How long we keep it
Account and shop data: while your account is open. Payment and payout records: as long as US financial recordkeeping rules require, even after your account is deleted. Technical logs: about 90 days. Backups are overwritten on a rolling 90 day cycle.
Deleting your data
Sellers can delete their account from inside the app, or by emailing us — the full process, and what we are required to keep, is on the account deletion page.
Buyers: email [email protected] and we will delete your details from the shops you ordered from, other than the payment records we are required to keep. To stop follow-up emails from a shop, use the unsubscribe link in any of them.
Your rights
Wherever you live, you can ask us what we hold about you, ask us to correct it, and ask us to delete it. If you are a California resident, you also have the right to know what we collect and to opt out of any sale or sharing of your personal information — we do not sell or share it, so there is nothing to opt out of. We will not treat you differently for exercising any of these rights. Email [email protected].
Children
Nilfpay is not for children. We do not knowingly collect information from anyone under 13. If you believe a child has given us information, email us and we will delete it.
Security
Traffic is encrypted in transit. Bank account numbers are stored so that only the last four digits are ever shown back, and any change to them triggers an email to the account holder. Sign-in is passwordless — a one-time code or link that expires — so there is no password of yours to leak.
Changes
If we change this policy materially we will update the date above and tell account holders by email before it takes effect.