Effective date: 2026/11/09
1. Who we are and what this policy covers
God Merch LLC ("God Merch", "we", "us") is a Wyoming limited liability company located at 30 N Gould St, Ste R, Sheridan, WY 82801, United States. We operate the God Merch Partner Portal (the "Service"), a business-to-business platform that provides bookkeeping, transaction reconciliation, and cash-flow reporting services to our business partners.
This Privacy Policy explains how we collect, use, disclose, store, and protect information when a business we work with (a "Partner") connects its bank accounts to the Service, and when the Partner's authorized representatives interact with us.
The Service is offered only to businesses. It is not directed to consumers or to individuals under 18.
Depending on the nature of the information and the applicable law, God Merch may act as a service provider or data processor when processing Partner Data on a Partner's behalf, and as an independent business or data controller when processing information for its own account administration, security, legal compliance, and business operations.
For purposes of this Policy, "Partner Data" means business, financial, transaction, and related information that we receive from or on behalf of a Partner through the Service.
2. Information we collect
We collect only what we need to provide bookkeeping, reconciliation and cash-flow reporting to each Partner.
|
Category |
Examples |
Source |
|---|---|---|
|
Bank account information |
Account name, type, last 4 digits (mask), institution name |
Plaid, with the Partner's consent |
|
Balances |
Current and available balances |
Plaid, with the Partner's consent |
|
Transactions |
Amount, date, description, counterparty or merchant name, category, pending status |
Plaid, with the Partner's consent |
|
Contact information |
Name, email and phone of the Partner's authorized representative |
The Partner directly |
|
Technical and usage data |
Connection status, timestamps, access logs |
Generated by the Service |
We do not collect or store online banking usernames or passwords.
How we use Plaid. We use Plaid Inc. ("Plaid") as a third-party provider to facilitate secure connections between the Partner's financial accounts and the Service. The Partner signs in to its bank directly through Plaid Link and chooses which accounts to share. By connecting an account, the Partner also agrees to Plaid's handling of its data under the Plaid End User Privacy Policy.
3. How we use and share information
We use Partner Data only to provide the Service to that Partner. We do not sell it, rent it, or use it for advertising.
We use the information to:
-
Record and categorize the Partner's transactions for bookkeeping
-
Reconcile payments and balances
-
Prepare cash-flow and financial reports for the Partner
-
Keep the bank connection working, and notify the Partner when it needs to be reconnected
-
Secure the Service, prevent misuse, and meet legal obligations
We share information only with:
-
Plaid, to establish and maintain the bank connection.
-
Our affiliated service provider, GOD Group (Vietnam), whose finance and technology staff operate the Service on our behalf under a written agreement. They may access the data only to provide the Service, under the same confidentiality and security obligations as God Merch.
-
Infrastructure providers (for example, cloud hosting) that store data on our behalf and may not use it for their own purposes.
-
Authorities or other parties when required by law, or to protect our rights, the Partner, or others.
-
A successor entity, if God Merch is involved in a merger, acquisition or sale of assets, subject to this Policy.
International transfer. Information may be accessed from and processed in Vietnam by our affiliated service provider. We apply the safeguards in Section 4 wherever the data is processed.
4. Security, retention and deletion
We protect Partner Data with encryption, access controls and monitoring, and we delete it within 30 days after a Partner disconnects.
Security measures
-
Encryption in transit (TLS 1.2 or higher) and at rest for all data received through Plaid
-
Additional application-level encryption of access tokens and secrets
-
Role-based access: only authorized staff assigned to a Partner can view that Partner's data
-
Centralized identity management, automatic removal of access when staff leave, and multi-factor authentication
-
Logging of access to and export of bank data
Retention and deletion
|
Situation |
What we do |
Timing |
|---|---|---|
|
Partner disconnects an account or revokes consent |
Remove the connection with Plaid and stop collecting new data |
Immediately |
|
After disconnection or end of the relationship |
Delete the Partner Data from our systems and backups |
Within 30 days |
|
Bookkeeping records we prepared for the Partner |
Keep only as long as required by applicable accounting, tax or legal obligations |
Up to 7 years |
|
Access and security logs |
Keep for security and audit purposes |
Up to 1 year |
We review this retention schedule at least once a year.
5. Your choices and rights
A Partner can stop sharing at any time and can ask us to access, correct or delete its data.
-
Disconnect: ask us to disconnect, or revoke access in your bank's online banking (for example, the connected apps settings at Chase or Bank of America) or at my.plaid.com.
-
Access and correction: request a copy of the Partner Data we hold about your business, or ask us to correct it.
-
Deletion: ask us to delete your data. We will do so within 30 days, except records we must keep by law (Section 4).
Send requests to the contact below. We will verify the request comes from an authorized representative of the Partner and respond within 30 days.
6. Changes to this policy
We will post any update on this page with a new effective date. If a change materially affects how we use Partner Data, we will notify Partners by email before it takes effect.
7. Contact us
God Merch LLC
30 N Gould St, Ste R, Sheridan, WY 82801, United States
Email: contact@godmerch.com