Privacy Policy
Effective date: November 4, 2026
PayZeroX is a mobile app that helps you pay off credit card debt. You connect your bank, and we show your card balances, interest rates and a payoff plan. This policy explains what information we collect, how we use it, and the choices you have.
The short version
- We collect only what we need to show your debt and build your payoff plan.
- We connect to your bank through Plaid. We never see or store your bank username or password.
- We do not sell your information, and we do not show ads.
- Your bank connection is encrypted on our servers.
- You can disconnect your bank or delete your account at any time from Settings, and we delete your data.
Information we collect
We collect four kinds of information.
| Type | What it includes | Where it comes from |
|---|---|---|
| Account information | Username, email address, password (stored only as a one-way hash, never readable) | You, when you sign up |
| Credit card information | Bank name, card name, last four digits, current balance, interest rate (APR), minimum payment, next due date | Your bank, through Plaid, after you connect it |
| Security and technical information | IP address, login attempts, and server logs of requests | Your device, automatically when you use the app |
| Messages you send us | Support requests and feedback, and any details you include | You, if you contact us |
What we do not collect: your bank username or password, your full card numbers, your Social Security number, your contacts, your photos, or your precise location. The app has no advertising or third-party analytics tools.
Password reset codes are stored only as a hash, expire after 10 minutes, and are deleted once used.
How we use your information
We use your information only to run PayZeroX:
- Show your debt: list your cards, balances, interest rates and due dates.
- Build your payoff plan: calculate your debt-free date, monthly payment, and interest compared with paying only minimums.
- Keep your account secure: sign you in, stop repeated wrong-password attempts, and detect misuse.
- Contact you about your account: password reset codes, important service notices, and replies to your support requests. We do not send marketing emails without your permission.
- Fix and improve the app: investigate errors and keep the service running.
We do not use your financial information for advertising, and we do not make credit decisions about you.
How we connect to your bank (Plaid)
PayZeroX uses Plaid Inc. to connect to your bank. When you tap Connect bank, Plaid's own screen opens and you sign in to your bank there.
- You give your bank login to Plaid, not to us. We never see or store it.
- Plaid gives us a secure connection key (an "access token") and your credit card information. We encrypt that key before storing it.
- We ask Plaid only for credit card (liability) information. We do not request bank account numbers or transaction history.
- Plaid's use of your information is covered by the Plaid End User Privacy Policy. By connecting your bank, you agree to it.
- You can disconnect your bank at any time in Settings > Connected banks. We then tell Plaid to end the connection and delete that bank's cards from PayZeroX.
How we share information
We do not sell your personal information, and we do not share it for advertising. We share information only with companies that help us run PayZeroX, and only what each one needs:
| Company | What they do for us | What they receive |
|---|---|---|
| Plaid Inc. | Connects to your bank | What you share with Plaid when you connect |
| Amazon Web Services | Hosts our servers, database and email sending | All information we store, kept on our behalf |
| Apple | Distributes the app through the App Store | What Apple collects under its own policy |
We may also disclose information if the law requires it, to protect the safety and rights of our users or others, or as part of a sale or merger of PayZeroX. If ownership changes, this policy continues to apply to information collected before the change.
How we protect your information
- Encrypted in transit: the app talks to our servers only over HTTPS.
- Encrypted bank connections: Plaid access tokens are encrypted with a separate key before they are stored.
- Passwords: stored only as a one-way hash. No one at PayZeroX can read them.
- Secure sign-in: login sessions expire after 60 minutes and renew automatically. Logging out or resetting your password signs out your old sessions. On your phone, sign-in tokens are kept in the iOS Keychain.
- Attack protection: repeated wrong passwords and request floods are blocked automatically.
- Limited access: only PayZeroX administrators can access our systems, using multi-factor authentication.
No system is perfectly secure. If we learn of a breach that affects your information, we will notify you as the law requires.
How long we keep your information
We keep your information while your account is open.
- Disconnect a bank (Settings > Connected banks): we end the Plaid connection and delete that bank's cards right away.
- Delete your account (Settings > Delete Account, with your password): we end all Plaid connections and permanently delete your account, cards and settings right away.
- Backups and logs: copies in backups and server logs are deleted on a rolling basis within 30 days.
- Legal holds: we may keep information longer only where the law requires it.
Your choices and rights
You can do these yourself in the app at any time:
- See your information: your profile and cards are shown in the app.
- Disconnect your bank: Settings > Connected banks.
- Delete your account and data: Settings > Delete Account.
Depending on where you live (for example California, Colorado, Virginia or other US states with privacy laws), you may also have the right to request a copy of your information, correct it, or ask us to delete it. To make a request, email us at privacy@payzerox.com. We will verify it is you and respond within the time the law requires. We will not treat you differently for using these rights.
We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.
Children
PayZeroX is for adults with credit cards. It is not meant for anyone under 18, and we do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
Where we operate
PayZeroX is offered in the United States, and your information is stored on servers in the United States.
Changes to this policy
If we change this policy, we will update the effective date above. For important changes, we will also notify you in the app or by email before they take effect.
Contact us
Hitham Hauter
New York, NY
Email: privacy@payzerox.com
You can also reach us from Settings > Contact Support in the app.