Privacy Policy

Effective Date: September 16, 2026 | Last Updated: September 16, 2026

1. Overview

At Vortisk ("we", "us", or "our"), we respect your privacy and are committed to protecting the information of merchants who use our Shift4 Payments by Vortisk integration application. This Privacy Policy describes how we collect, store, and process information.

🛡️ 2. No Cardholder Data Is Ever Collected or Stored

We never collect, store, retain, or process full payment card numbers, card verification values (CVV/CVC), or expiration dates.

Payment details are entered by the consumer into an encrypted iframe using Shift4's client-side library (shift4.js). The sensitive payment data travels straight from the consumer's web browser to Shift4's PCI Level 1 certified vault. Our servers only receive and log temporary transaction identifiers (tokens) and payment confirmation metadata required by your CRM platform.

3. Information We Collect

When you install and configure the application, we collect only the minimal data necessary to provide the service:

  • Account Metadata: Sub-account Location ID, Company ID, account name, business email, and OAuth authentication tokens.
  • Shift4 Merchant Configuration: Shift4 Public Key and Shift4 Secret Key. These keys are strictly encrypted at rest in our database using AES-256 encryption.
  • Transaction Status Records: Transaction IDs, amounts, currency, status (success/failure), and timestamps to provide an audit log in your admin dashboard.

4. How We Use Information

We use the collected information exclusively to:

  • Authenticate and maintain connection between your CRM sub-account and Shift4.
  • Forward authorization tokens to Shift4 to execute transaction requests initiated by your checkout forms.
  • Communicate payment status events (charge approval, refunds) back to your CRM account.
  • Provide customer support and monitor integration health.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal or business data. We only share information with:

  • Shift4: To authorize and process transactions per your instruction.
  • Your CRM Provider: To report transaction events and maintain your custom payment provider registration.

6. Security Measures

We implement robust technical and organizational measures to safeguard your information, including SSL/TLS in transit, database encryption at rest (AES-256), strict token expiration, and automated rate limiting.

7. Contact Us

If you have any questions or privacy concerns, please contact us at:

Vortisk Privacy Team

Email: support@vortisk.com