Just Released! Our official workshop to level up from UiCore Framework 4 to 5.Privacy Policy
Effective Date: 12/05/2020
Thank you for visiting s4afs.com. AFS (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring your information is handled with transparency, accuracy, and care. This Privacy Policy outlines how we collect, use, and protect the information you provide when using our website, application, and services.
1. Who We Are
AFS operates s4afs.com and provides software and API tools that connect NMI (Network Merchants Inc.) with HubSpot. Our platform functions as a gateway integration service, allowing businesses to manage payment-related activity and customer engagement through their CRM without storing or processing sensitive payment data.
We also support merchants and partners with gateway setup and management, but do not process transactions or store payment credentials on our systems.
2. What We Do
Our services act as a technical connector between your NMI merchant account and HubSpot CRM. We facilitate authorized access to your gateway via secure API protocols. This enables visibility and automation within your CRM but does not involve us storing or transmitting any cardholder or payment data.
AFS does not store, transmit, or access any sensitive cardholder data. All transactions are processed through PCI-DSS compliant providers (e.g., NMI).
3. Information We Collect
We only collect and retain non-sensitive data required to operate and support the service:
- Company name and contact information
- HubSpot user ID and integration settings
- NMI API credentials (stored encrypted)
- Usage statistics and connection logs (non-transactional)
- Support communication history
We do not collect or store:
- Cardholder names
- Credit card numbers
- CVV/CVC codes
- Bank account details
- Transaction amounts or details
All such information remains solely within the scope of your gateway provider (NMI) and your merchant account.
4. Use of Your Information
We use the collected information only to:
- Authenticate and maintain your secure API connection
- Provide technical support and platform troubleshooting
- Monitor uptime and service performance
- Communicate product updates and support notices
We never sell, rent, or share your data with advertisers or third-party marketers.
5. Gateway Provider & Regulatory Responsibility
As a gateway provider and API integration platform, AFS:
- Operates under industry standards for payment gateway configuration and usage
- Assists in onboarding merchants with their NMI gateway
- Complies with applicable laws and regulations (e.g., FTC, CAN-SPAM, state-level privacy acts)
- Does not store, log, or process cardholder data; all such responsibilities fall under the merchant of record and gateway provider (e.g., NMI)
We require that our users and merchants maintain PCI-DSS compliance through their gateway accounts and do not circumvent security protocols.
6. Data Security
We use industry-standard measures to secure your account data:
- End-to-end encryption for all API traffic
- Encrypted storage of API keys
- Role-based access control within our team
- TLS (HTTPS) for all service endpoints
- Regular internal reviews of access and usage
Because we do not handle or store payment data, PCI-DSS compliance is maintained at the gateway level.
7. Third-Party Services
Our platform integrates with:
- NMI, your payment gateway provider
- HubSpot, your CRM and contact platform
Each service has its own privacy policy and data handling standards. Please review those documents separately to understand how your data is handled across platforms.
8. Your Rights & Control
As a user of our platform, you have the right to:
- Request access to the data we hold about your integration
- Update or correct your contact or company information
- Revoke access to our services at any time
- Delete your account and related metadata by contacting support
To exercise these rights, please email support@s4afs.com.
9. Cookies and Site Tracking
We use minimal cookies for basic session functionality. We do not use cookies for advertising, behavioral tracking, or third-party analytics.
10. Data Retention
We retain non-sensitive integration data (e.g., usage logs, credentials, and contact info) only as long as your account is active or as required to fulfill our legal obligations. All deletion requests are honored within 30 days.
11. Policy Changes
This policy may be updated periodically to reflect operational, legal, or regulatory changes. Updates will be posted on this page, and we will notify account holders directly when significant changes are made.
Last updated: 12/05/2020
12. Contact Us
If you have questions about this policy or our practices, reach out:
AFS
Email: support@s4afs.com
Website: https://s4afs.com