Privacy and Data Handling Notice

Effective July 14, 2026

This notice explains how BSS Technologies Inc. handles information submitted through the VYQ Payment Risk Review and Referral Partner Program.

Information collected

• Business contact information, including name, role, organization, email, and optional phone.
• Purchase, invoice, or approval references used to verify service eligibility.
• Redacted case descriptions, amount ranges, vendor or payee context, verification attempts, requested outcomes, and optional evidence files.
• Referral partner application details.
• Limited technical information used for security, such as a one-way hash of the submitting IP address, timestamps, and audit events.

How information is used

Information is used to verify payment and authority, perform the requested review, communicate with the customer, prepare the report, manage referrals, prevent abuse, maintain an audit trail, improve operations, and meet legal or contractual obligations.

Data minimization

Do not submit passwords, MFA codes, card numbers, CVV, private keys, full Social Security numbers, full bank account or routing numbers, login credentials, or unnecessary personal information. BSS may reject or delete prohibited information.

Sharing

BSS does not sell submitted case information. Information may be handled by service providers needed for hosting, email, security, and payment processing; disclosed to professional advisers under appropriate duties; or disclosed when legally required. Stripe processes checkout information under its own privacy practices. BSS does not receive card numbers from the Stripe-hosted checkout page.

Retention

BSS retains records only as reasonably necessary to deliver the service, maintain security and audit evidence, resolve disputes, and meet legal or contractual obligations. Retention may vary by case and written agreement. Customers may request review or deletion of information, subject to identity verification and legitimate retention requirements.

Security

BSS uses access controls, protected storage, randomized stored filenames, file-type and size restrictions, redaction requirements, audit records, and other reasonable safeguards. No system can guarantee absolute security.

Choices and requests

To request access, correction, deletion, or information about BSS data practices, email info@bsstechnologiesinc.com. State “Privacy Request” in the subject and provide enough information to verify the relevant business record. BSS does not discriminate for exercising applicable privacy rights.

Changes

Material updates will be posted with a revised effective date. This notice applies only to the VYQ business review and partner workflows described here, not to unrelated third-party sites.