Business Check — Terms and processing notice

This notice explains what happens when you use the Business Check tool at /en/business-check/: what information we ask for, how we process it, what the report is, how long we keep the data, and how you can exercise your rights. This notice supplements our general Privacy Notice and Terms of Service.

Effective date: 30 July 2026.

1. What Business Check is

Business Check is a diagnostic tool. You describe your business in a short structured intake — a few open-ended answers on top of your email, preferred language and the bank where your business account lives. We prepare a written specification of the miaPOS products that fit your business, and send it to you by email. The report is a specification, not an offer or a contract; your bank is the party that ultimately activates any of the described products on your merchant account.

2. Who processes your information

Depending on the bank you select in the picker at the start of the intake, the controller of your Business Check data is:

Instapay Tech S.R.L. (Bucharest, Romania) — if you select a Romanian bank (e.g. Librabank).
Finergy Tech S.R.L. (Chișinău, Republic of Moldova; IDNO 1014600013927) — if you select a Moldovan bank (MAIB, EuroCreditBank, Eximbank, FinComBank, Energbank, Moldindconbank) or "Other / not sure".

Contact for data-protection questions and requests: [email protected].

3. What we collect

Contact: your email address, and any name or phone number you optionally share.
Context: the bank you selected, your preferred report language, and the URL of your website if you provided one.
Intake transcript: the free-text answers you enter during the intake, together with the follow-up questions the tool sends back.
Technical: IP address, coarse device / browser info, timestamps, a Cloudflare Turnstile token that helps us tell humans from bots.

4. Why we process it (lawful bases)

Your consent — for preparing and sending the Business Check report, storing the intake transcript, and following up by email in the language of the report. You give this consent by ticking the box on the intake page.
Our legitimate interest — for site-abuse prevention, rate-limiting, security logging, and keeping aggregate metrics on how well the tool works. This does not use your identity.
Legal obligation — where we must retain records for accounting, tax or regulatory audit.

5. How we prepare the report

The report is prepared with the help of automated systems working from the information you provide during the intake. The tool asks follow-up questions adaptively; the follow-ups and the final written report are generated by automated systems and reviewed by a miaPOS team member before being sent to you (during early access). The report is informational — it describes the miaPOS products that fit your business — and does not produce a legal, financial, or activation decision about you. Your bank, not miaPOS, is the party that decides whether to activate any product on your merchant account.

If you told us you have a website, we may scan public pages of that site with our Site Check tool (/en/site-check/) in the background to make the report concrete about your platform. Site Check does not install anything and does not read anything that is not publicly accessible.

6. Sub-processors

To operate the tool we share information with the following processors:

Cloudflare, Inc. — hosting, CDN, Turnstile bot protection.
Anthropic PBC — the model provider that generates the intake follow-ups and the report. Data is processed under Anthropic's data processing terms. Prompts and outputs are not used to train Anthropic's models.
Brevo — transactional email delivery of the report and any follow-up messages.
HubSpot, Inc. — the CRM where we record your contact information and the report so we can follow up.

Standard EU data-protection safeguards (Standard Contractual Clauses where relevant) are in place with each processor. Transfers outside the EU / EEA rely on the corresponding safeguards.

7. How long we keep it

Intake transcript: 180 days from your session, then deleted.
Final report: 2 years, so we can send you a copy again if you ask.
Personal contact data (email, name, phone): 2 years, or until you ask us to erase it — whichever comes first.
Aggregate metrics (turn counts, terminal reasons, timing — no identifiers): kept indefinitely for tool improvement.

8. Your rights

You can, at any time:

Access the information we hold about your Business Check session.
Ask us to rectify inaccurate information.
Ask us to erase your Business Check data before the retention period ends.
Withdraw the consent you gave — future processing stops immediately; processing that already happened remains lawful.
Object to processing based on our legitimate interest.
Lodge a complaint with your local data-protection authority (in Moldova: the National Center for Personal Data Protection; in the EU: your national supervisory authority).

To exercise any of these rights, write to [email protected]. Every Business Check report you receive also includes a link that takes you directly to this address.

9. About automated systems

Some Business Check outputs (the follow-up questions during the intake and the draft of your report) are produced by automated systems on top of the information you provide. A miaPOS team member reviews each report before it is sent to you during early access; the report itself is informational and does not decide about you legally, financially or in any activation sense. If you would prefer to describe your business by email to a human directly, write to [email protected] and we will handle your request end-to-end without the intake tool.

10. Changes to this notice

We may update this notice. Material changes will be announced on this page with a revised effective date. The version in force at the time you use the tool applies to that session.