Privacy policy
What Ronda keeps, what it never touches, and who else sees it.
We never see a card number
Cards are typed on the bank's page. We keep the bank's token and the last four digits.
We don't sell data
And we don't use customer data for advertising or model training.
The business decides
For customer data, the business is the controller. Ronda processes it on their behalf.
Ask to see or delete it
On this page
Who this covers
Two groups: merchants who hold a Ronda account, and their customers, whose data Ronda processes on the merchant's behalf. For customer data the merchant is the controller and Ronda is the processor.
Ronda is operated by ԱՁ Արամ Մարգարյան, ՀՎՀՀ 20406437, Yerevan, Armenia. Questions about your data, or a request to see or delete it: ciao@ronda.am.
What Ronda stores about merchants
- Email address, name, and a password hash held by our authentication provider (Supabase).
- Business name, legal name, tax id, website and support email, as entered.
- Bank vPOS credentials, encrypted with AES-256-GCM. They are never displayed again after saving.
- Sign-in attempts, IP address and a hash of the browser user-agent, for lockout and new-device alerts.
- An audit log of privileged actions: keys created, roles changed, two-factor turned on or off.
What Ronda stores about customers
- Email address, name and phone number, where the merchant collects them.
- A card token issued by the bank, plus brand, last four digits and expiry. Ronda never receives or stores a full card number — the card is entered on the bank's page.
- Payment, subscription and refund history, including decline reasons.
- The IP address and user-agent of a checkout, used to detect card-testing.
What Ronda never stores
Card numbers, CVC codes, 3-D Secure codes, or any cardholder authentication data.
Who else sees it
- Your acquiring bank, which processes the payment.
- Supabase (database and authentication) and Railway (application hosting).
- Any webhook endpoint you configure — you choose what is sent by choosing the events.
- Cloudflare Turnstile, which checks that sign-up forms, payment links and the customer portal are used by a person and not a bot. Its use is governed by the Cloudflare Turnstile Privacy Addendum.
How long it is kept
Payment, ledger and audit records are kept for as long as the account is active and for the retention period Armenian accounting rules require afterwards. Deleting a customer clears their personal data and deactivates their saved cards, but keeps the financial record, because a ledger that can be rewritten is not a ledger.
Your rights
Merchants can export or delete their data by contacting ciao@ronda.am. Customers should contact the business they paid; Ronda acts on that business's instructions.