Privacy Policy

Introduction

This Privacy Policy describes how Krizan Elsharaky Solutions Ltd (trading as TensorRail) (“we”, “us”, “our”) collects, uses, and protects information when you use our payment orchestration platform and related services. We are registered in Cyprus and operate TensorRail as a technology platform that facilitates payment processing through integration with payment service providers (processors). This policy applies to our website, API, dashboards, and any communication with us.

Information We Collect

We collect the following categories of information:

Account information

Company name, contact person name, email address, phone number, billing address, and other details you provide when registering or managing your account.

API usage data

API calls, endpoints used, timestamps, IP addresses, and related technical logs necessary to operate, secure, and improve the platform.

Transaction metadata

Transaction IDs, amounts, currencies, status, and processor response codes. We do not collect or store payment card numbers, CVVs, or full bank account details. Card data is captured directly by processor-hosted secure fields within the customer's browser and never passes through TensorRail infrastructure.

Technical data

When you visit our website or use our dashboards: browser type, device information, and IP address, for security and operational purposes.

Communication data

Support tickets, emails, and other correspondence you send to us.

Information We Do Not Collect

We do not collect payment card numbers, CVVs, or bank account details. These are captured directly by processor secure fields in the customer's browser and transmitted to the processor without passing through TensorRail. We do not collect end-customer personal data (e.g. cardholder names, addresses) — your customers interact with processors for payment collection. TensorRail only receives transaction metadata necessary for orchestration, routing, and support.

How We Use Information

We use the information we collect to:

• Provide and improve the TensorRail platform and services
• Deliver error intelligence, routing optimization, and analytics
• Bill and invoice you and manage your account
• Monitor for security incidents and prevent fraud and abuse
• Comply with applicable laws and respond to lawful requests

Data Sharing

We do not sell your data. We may share information only as follows: (1) with processors as instructed by you to execute payment operations; (2) with infrastructure and service providers (e.g. hosting, email) who process data on our behalf under strict agreements; (3) with legal or regulatory authorities when required by law. We require all such parties to protect your information in line with this policy and applicable law.

Data Security

We use TLS 1.2 or higher for all data in transit and industry-standard encryption for data at rest. Access to systems and data is restricted by role, and we maintain audit logs of administrative and payment-related operations. Your processor credentials are stored encrypted in isolated, access-controlled environments and are never shared between merchants or with third parties except as necessary to perform the services you have requested.

Data Retention

We retain transaction metadata for up to 7 years where required for regulatory and compliance purposes. API and operational logs are retained for 90 days. Account data is retained for the duration of our agreement and for one year thereafter, unless a longer retention period is required by law.

Your Rights (GDPR)

If you are in the European Economic Area or otherwise subject to GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and to data portability where applicable. You may exercise these rights by contacting us at legal@tensorrail.com. You also have the right to lodge a complaint with a supervisory authority.

International Transfers

Data is processed within the European Union. Where we transfer data outside the EEA, we ensure appropriate safeguards (such as standard contractual clauses or adequacy decisions) are in place.

Cookies

Our use of cookies and similar technologies is described in our Cookie Policy. Please refer to that policy for details.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice in your dashboard. The “Last updated” date at the top of this page will be revised accordingly.

Contact

For privacy-related questions or to exercise your rights, contact us at legal@tensorrail.com. Krizan Elsharaky Solutions Ltd, Platonos 4, 3027, Agia Zoni, Limassol, Cyprus.