HRonda
Sign inStart free

Privacy policy

Draft — last updated 2026-08-22

A working draft. It describes what the software actually does today, but it has not been reviewed by counsel against Armenian data-protection law or the GDPR.

Who this covers

Two groups: merchants who hold a Ronda account, and their customers, whose data Ronda processes on the merchant's behalf. For customer data the merchant is the controller and Ronda is the processor.

What Ronda stores about merchants

  • Email address, name, and a password hash held by our authentication provider (Supabase).
  • Business name, legal name, tax id, website and support email, as entered.
  • Bank vPOS credentials, encrypted with AES-256-GCM. They are never displayed again after saving.
  • Sign-in attempts, IP address and a hash of the browser user-agent, for lockout and new-device alerts.
  • An audit log of privileged actions: keys created, roles changed, two-factor turned on or off.

What Ronda stores about customers

  • Email address, name and phone number, where the merchant collects them.
  • A card token issued by the bank, plus brand, last four digits and expiry. Ronda never receives or stores a full card number — the card is entered on the bank's page.
  • Payment, subscription and refund history, including decline reasons.
  • The IP address and user-agent of a checkout, used to detect card-testing.

What Ronda never stores

Card numbers, CVC codes, 3-D Secure codes, or any cardholder authentication data.

Who else sees it

  • Your acquiring bank, which processes the payment.
  • Supabase (database and authentication) and Railway (application hosting).
  • Any webhook endpoint you configure — you choose what is sent by choosing the events.

Ronda does not sell data, and does not use customer data for advertising or model training.

How long it is kept

Payment, ledger and audit records are kept for as long as the account is active and for the retention period Armenian accounting rules require afterwards. Deleting a customer clears their personal data and deactivates their saved cards, but keeps the financial record, because a ledger that can be rewritten is not a ledger.

Your rights

Merchants can export or delete their data by contacting privacy@ronda.sh. Customers should contact the business they paid; Ronda acts on that business's instructions.

Contact

privacy@ronda.sh