Privacy Policy

What we are, and what we are not

This application connects your CRM sub-account to your own Mollie account so you can accept payments. We are a technical link between the two.

We are not a payment service provider. Money never flows through us: it goes from your customer to your own Mollie account. Card numbers, bank details and IBANs are entered on Mollie’s own environment and never reach our servers.

What we store

• Access tokens for your CRM sub-account and your Mollie account. These are encrypted before storage and are never shown to anyone.
• Identifiers we need to link things up: sub-account ID, contact ID, order ID, transaction ID, subscription ID, and the corresponding Mollie IDs.
• Payment details of a transaction: amount, currency, description, status and timestamps.
• The data your CRM sends us when a payment starts, which includes the name and email address of the paying customer, and their address if your form collects one.
• A log of the messages exchanged between your CRM, Mollie and this application, so a payment can be traced when something goes wrong.
• The language and country of your sub-account, so the checkout appears in the right language.

Why we store it

To start a payment, to determine whether it succeeded, to report it back to your CRM, and to collect subscription renewals. Without these details a payment cannot be linked to the right order or customer.

The message log exists to resolve problems. A SEPA Direct Debit can take days to settle, and without a trace it is impossible to establish afterwards what happened to a payment.

Who we share it with

Only with the two parties already involved in your payment: Mollie B.V. as payment service provider, and the platform your sub-account runs on.

We do not sell data, we do not use it for advertising, and we do not share it with anyone else unless the law obliges us to.

Where it is stored

Your data is stored inside the European Union. The application runs on Railway in Amsterdam, the Netherlands, the database is hosted with Neon in Frankfurt, Germany, and the daily backups are kept with Cloudflare in R2 storage under EU jurisdiction. All access tokens are encrypted at rest with AES-256-GCM.

One step may leave the EU. The nightly backup job runs on GitHub’s infrastructure, which gives no guarantee as to where it is executed, and the database passes through it before being written to storage in the EU. GitHub (Microsoft) participates in the EU-US Data Privacy Framework and relies on standard contractual clauses.

How long we keep it

For as long as the app is installed on your sub-account. When you uninstall it, processing stops and the connection with Mollie is closed, which makes the stored tokens unusable.

Transaction records are kept longer, because bookkeeping and dispute resolution require it. You can request deletion of your data at any time by emailing us.

When we delete data, it remains present in the daily backups for up to 90 days, after which those expire on their own. Backups are not edited, as that would destroy their value as a restore point.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your data, and you can object to its processing. Email info@ydmdesign.be and we will respond within thirty days.

If you are a merchant using this app, you are the controller of your customers’ data and we act as your processor. If you are a customer making a payment, your contract is with the merchant, and you can reach us at the same address.

Changes

If this policy changes materially, we will note it here with a new date. Continued use after a change means you accept the updated policy.