Privacy notice
Last updated 21 July 2026
This notice explains what personal information PayTPA collects, why, who we share it with and the choices you have. It covers this website and the PayTPA payout platform.
Who we are
PayTPA is a trading name (d/b/a) of Orchard Times Publishing Inc., a United States company whose registered agent is at 992 Davidson Dr, Ste B, Nashville, TN 37205-1051. In this notice, “PayTPA”, “we” and “us” mean Orchard Times Publishing Inc. For anything about your personal information, email privacy@paytpa.com.
Our two roles
On this website and in our sales conversations, we decide how your information is used.
On the PayTPA platform, we handle people’s details on behalf of our customers, such as insurers, third-party administrators and other platforms that pay their members. When a customer pays you through PayTPA, that customer is responsible for your information and their privacy notice applies. We act as their service provider, only on their instructions and under a written agreement.
What we collect on this website
- Sandbox requests: your name, work email, company, expected payout volume and the currencies you need, when you send the form.
- Correspondence: anything you send us by email or chat.
- Technical data: your IP address, browser type and the pages you visit, recorded in our hosting provider’s standard server logs.
We do not use advertising or analytics cookies on this website. Fonts are loaded from Google Fonts, which means your browser shares your IP address with Google. The live code demo runs entirely in your browser, and nothing you type into it is sent to us.
What we process on the platform
- Member identity and contact details, such as name and email address.
- Bank account and wallet details entered by members through the payout widget.
- Payout details, such as amounts, currencies, references and status.
- Results of identity verification and sanctions screening.
How we use it
- To answer inquiries and set up sandbox access.
- To provide the platform for our customers.
- To prevent fraud and meet our legal obligations, including identity checks, sanctions screening and record keeping.
- To keep our website and services secure.
- To send product news, where you have agreed or the law allows it. You can unsubscribe at any time.
Who we share it with
- Payment and foreign-exchange providers that carry out payouts, such as Treasury Prime, Bridge, Airwallex, Nium, Corpay and Wise.
- Our identity verification provider, Didit.
- Cloud hosting and encryption key management, provided by Google Cloud.
- Formspree, which receives this website’s sandbox request form.
- Professional advisers, and law enforcement, courts or regulators when the law requires it.
- A buyer or successor, if our business is sold or merged.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of selling or sharing, which we already do not do.
How we protect it
Bank details are encrypted in transit and at rest, with a separate key for each account. They are masked by default, and every full reveal requires a reason and is logged. No system is completely secure, but we work to protect your information and will notify you of a data breach where the law requires it.
How long we keep it
We keep inquiry information for up to 24 months after our last contact with you. We keep platform information for as long as our customer instructs and as long as financial record-keeping and anti-money-laundering laws require.
Your US state privacy rights
Depending on the state you live in, such as California, Colorado, Connecticut, Virginia, Texas or Tennessee, you may have the right to:
- know what personal information we hold about you and get a copy of it;
- correct information that is inaccurate;
- delete your information;
- opt out of the sale or sharing of your information, or its use for targeted advertising or profiling, although we do not do any of these.
To make a request, email privacy@paytpa.com. We will check your identity before acting on it, and you can ask an authorized agent to make a request for you. If we turn down your request, you can appeal by replying to our decision. We will not treat you differently for using these rights.
If your request is about a payout you received, it is quickest to contact the organization that paid you. If you contact us, we will pass your request on to them.
If you are in the UK or European Economic Area
We are based in the United States, so your information is processed there. Where we are responsible for it, we rely on these legal bases:
- Inquiries and sandbox access: steps you ask us to take before a contract, and our legitimate interest in responding to business inquiries.
- Fraud prevention and security: our legitimate interest in keeping payouts and our systems safe, and legal obligations that apply to us.
- Product news: your consent, where the law requires it.
When we transfer your information out of the UK or EEA, we use approved safeguards such as the EU Standard Contractual Clauses and the UK Addendum to them. You can ask to access, correct or delete your information, restrict or object to how we use it, receive a copy of it, or withdraw consent, by emailing privacy@paytpa.com. You can also complain to the Information Commissioner’s Office at ico.org.uk or to your local data protection authority.
Children
Our website and services are not intended for anyone under 18, and we do not knowingly collect information from children under 13.
Changes to this notice
We will update this notice when our practices change and show the new date at the top.