Privacy Policy

Last updated: 9 December 2025

Message 2 Pay (“we,” “our,” “us”) turns payment emails and messages into SEPA payment QR codes. This Privacy Policy explains what happens to the content you paste, which data we collect, and how we protect it.

1. How the service works

When you paste a payment email or message, we parse it to extract IBAN, amount, beneficiary, and reference to generate a SEPA payment QR code. The pasted content is processed server-side in memory solely to produce the QR code and is not stored.

2. Data we process

• Pasted content: handled in memory to build the QR code, discarded after the request.
• Technical data: IP address, timestamps, user agent, and usage events for security, debugging, and analytics.
• Account or contact data (if provided): if you sign in or reach out, we process the details you supply to operate the service and respond.

3. How we use information

We use data to run and improve the service, measure reliability, prevent abuse, and communicate about updates or support. Any future features (such as paid tiers) will follow this policy and may prompt for additional consent where required.

4. Legal basis (EU users)

We rely on legitimate interest to provide and improve the service and on consent where the law requires it (for example, optional analytics or marketing communications).

5. Third-party services and transfers

We use hosting and analytics providers that may process technical data on our behalf. Data is primarily processed in the EU; if a provider processes data outside the EU, it is under contractual safeguards such as Standard Contractual Clauses.

6. Data retention

Pasted content is not stored. Technical logs and analytics are kept only as long as needed for security, troubleshooting, or aggregated reporting.

7. Your rights

Under the GDPR and other applicable laws, you can request access, correction, deletion, or restriction of your data. Contact us to exercise these rights.

8. Cookies and tracking

If cookies or similar tracking tools are used, they are limited to analytics and performance. You can disable them in your browser settings.

9. Data security

We implement reasonable technical and organizational measures to protect data from unauthorized access, misuse, or loss.

10. Who we are

Message 2 Pay is a service operated by CLNS (registered in Belgium).

11. Contact

For privacy-related inquiries or data requests, reach us via the contact form on the site.

12. Changes to this policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date.