Privacy Policy

Last Updated: February 2026

1. Introduction and Scope

Pulsepay ("we," "us," or "our") is a financial technology platform and a trade name of Flexstay Corporation. This Privacy Policy describes how we collect, use, and disclose your information when you use our property payment rails. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

To provide institutional-grade payment services, we collect several types of information:

  • Identity Data: Including names, government-issued identification, and beneficial ownership details required for AML/KYC (Anti-Money Laundering and Know Your Customer) compliance.
  • Contact Data: Business addresses, email addresses, and phone numbers.
  • Financial Data: Bank account details, void cheques, and transaction history necessary for settlement and underwriting.
  • Technical Data: IP addresses, browser types, and usage patterns to ensure platform security and fraud prevention.

3. How We Use Your Data

We process your information for the following purposes:

  • Underwriting: To assess merchant risk and initialize your integration.
  • Transaction Processing: Facilitating rent payments and settlements in partnership with our payment facilitator, Tilled.
  • Compliance: Meeting our legal obligations under Canadian financial regulations.
  • Platform Security: Monitoring for fraudulent activity to protect the property ecosystem.

4. Security Standards

Data security is the foundation of our infrastructure.

  • PCI-DSS Compliance: All payment data is handled by systems certified as PCI-DSS Level 1 Compliant.
  • Encryption: We use industry-standard SSL/TLS encryption for all data in transit.
  • Sovereignty: We do not sell your personal or merchant data to third-party marketers.

5. Third-Party Disclosures

We share information with third-party partners only as necessary to provide our services:

  • Processing Partners: Our core processing is powered by Tilled, which adheres to strict security and privacy standards.
  • Regulatory Bodies: We may disclose information if required by law to comply with subpoenas or AML reporting requirements.

6. Contact Us

If you have questions regarding this Privacy Policy or our data practices, please contact our compliance team:

Pulsepay ComplianceEmail: info@pulsepay.ca

‍