Plain Language Disclosure

Privacy Policy

Direct, accurate disclosure of what we collect, how we handle merchant statements, and where the AI analysis happens. No legalese for legalese sake.

Last Updated: April 28, 2026

01. Who This Applies To

This Privacy Policy describes how PaaS by Payments as a Service™ LLC, operating as part of DataNav Solutions, handles personal and business information collected through getpaas.net, including the Statement Analyzer tool, the savings calculator, and the contact and lead capture forms.

It does not cover practices of third-party services we link to, including DataNav Solutions corporate properties (datanavsolutions.com, datanavmg.com), which operate under their own respective privacy notices.

02. Information We Collect

Statements You Upload to the Analyzer

When you upload a merchant processing statement, the file is sent to our server, transmitted to our AI analysis provider for real-time processing, and a structured analysis is returned to your browser. The original file is not written to disk on our servers and is not retained after the request completes.

Lead Capture and Contact Information

When you enter an email address to unlock a full fee breakdown, or submit the contact form on the homepage, we collect the information you provide. This may include name, business name, email address, monthly processing volume, current processor, and any message text. This information is used to respond to your inquiry and follow up about PaaS services.

Technical Information

Our web server logs standard request information for security and operational purposes only: IP address, timestamp, user agent, and the page or endpoint requested. These logs are retained for 30 days and then rotated out. We do not use cookies for advertising, analytics, or cross-site tracking.

03. How AI Analysis Works

The Statement Analyzer uses a large language model provided by Anthropic (the maker of the Claude family of models) to extract structured fee data from your uploaded statement. We want to be precise about what this means for your data.

What Anthropic does with API data: Anthropic does not use API inputs or outputs to train its models. API submissions may be retained on Anthropic's infrastructure for a limited period (typically up to 30 days) for trust and safety review, after which they are deleted under Anthropic's documented retention policies.
What this means for you in plain terms: When you upload a statement, that file briefly travels through Anthropic's API for analysis. It is not used to train any AI model. It is not visible to other Anthropic customers. It is not visible to other PaaS users. It is not retained on our servers. It may be temporarily retained on Anthropic's infrastructure under their abuse-monitoring policy, then deleted.

For Anthropic's full policy, see anthropic.com/legal/privacy and their commercial terms.

04. How We Use Your Information

05. What We Never Do

06. Data Retention

Different categories are retained for different durations:

07. Your Rights

Regardless of where you live, you may at any time:

California Residents (CCPA / CPRA)

You have the right to know what categories of personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising as defined under the CPRA.

EU and UK Residents (GDPR / UK GDPR)

If you are in the EU or UK, you have rights of access, rectification, erasure, restriction, portability, and objection under GDPR. Our lawful basis for processing is legitimate interest (responding to your request) and consent (when you submit a contact form or upload a statement for analysis).

To exercise any of these rights, contact us through the homepage contact form. We respond within 30 days.

08. Security

No system is invulnerable. If we ever discover a breach affecting your information, we will notify you and any required regulators within the timeframes required by applicable law.

09. Children

This site and the services described here are intended for businesses and adult professionals. We do not knowingly collect information from anyone under 18. If you believe a minor has submitted information to us, contact us through the homepage and we will delete it.

10. Cookies and Tracking

getpaas.net uses no advertising cookies, no third-party analytics, no retargeting pixels, no Facebook Pixel, no Google Analytics, and no cross-site tracking.

The site uses standard server logs and short-lived session-state cookies (where present) only as required for the page to function. None of these are shared with third parties.

11. Sub-Processors and Vendors

We rely on a small number of third-party services to operate getpaas.net. As of the last updated date above, these are:

Payment processing partnerships involve additional regulated sub-processors (card networks, sponsor banks, gateway providers). Those relationships are governed by your separate merchant services agreement and the applicable card network rules.

12. Changes to This Policy

If we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where appropriate, post a notice on the homepage. Continued use of the site after a material change indicates acceptance of the revised Policy.

13. Contact

For privacy questions, data access requests, or deletion requests, use the contact form on getpaas.net. We respond within 30 days.

For corporate inquiries, reach the parent company at datanavsolutions.com.