← Back to homepage

Privacy Policy

Last updated: October 2026

1. Controller

Solution Thirteen LLC, 7901 4th Street N, Ste 22667, St. Petersburg, FL 33702, USA. EIN 93-2818648. Represented by Björn Skamrahl. Email: support@paythirteen.com

2. EU representative (Art. 27 GDPR)

We have appointed Prighter Group (EU location: Germany) and its local partners as our data protection representative and your point of contact in the European Union. You can exercise your rights there: https://app.prighter.com/portal/19458169622

3. Who this policy covers

This policy applies to visitors of paythirteen.com, people on our waitlist, Pay Thirteen members, and the clients of our members to whom we issue invoices.

4. Data we process and why

  • Waitlist: email address, language. Purpose: to inform you about the launch. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.
  • Account data: name, email, phone number, country, password (encrypted). Purpose: to provide your account. Legal basis: contract (Art. 6(1)(b) GDPR).
  • Identity verification: passport or ID document, date of birth, nationality, a selfie and liveness check, and company documents where applicable. Purpose: to verify your identity and meet anti-money-laundering and sanctions obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR) and legitimate interest in preventing fraud (Art. 6(1)(f) GDPR). Where the selfie check involves biometric data, we process it only with your explicit consent (Art. 9(2)(a) GDPR), which you give before the check.
  • Project and payment data: project descriptions, invoices, client details, payment amounts, payout destinations (bank details, wallet addresses), transaction history. Purpose: to invoice your clients, process payments and pay you out. Legal basis: contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
  • Data about our members' clients: company name, contact person, billing address, email, VAT or tax ID if provided, payment details. Purpose: to issue invoices and process payments. Legal basis: our legitimate interest in performing the contract with the client (Art. 6(1)(f) GDPR) and contract (Art. 6(1)(b) GDPR).
  • Support: messages you send us. Purpose: to answer your request. Legal basis: contract or legitimate interest.
  • Referral program: your referral code, the referral code and email address of the member who invited you, and the status of referral rewards. Purpose: to run the referral program and prevent abuse. Legal basis: contract (Art. 6(1)(b) GDPR) and legitimate interest in preventing fraud (Art. 6(1)(f) GDPR). The member who invited you sees only your first name or a masked email address and the status of the reward.
  • Technical data: IP address, device and browser data, timestamps, login events. Purpose: security, fraud prevention and operation of the service. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

5. Recipients

We share personal data only where needed to run the service:

  • Payment processing, account and wallet infrastructure providers, and currency conversion providers
  • Identity verification providers
  • Hosting, database and infrastructure providers (including Supabase, Cloudflare and Lovable)
  • Email delivery providers
  • Card issuing partners, once the Pay Thirteen card is available
  • Authorities, where we are legally required to disclose information
  • Professional advisors (for example lawyers or auditors), bound by confidentiality

We never sell your data and never use it for advertising.

6. Transfers to the USA and other countries

Pay Thirteen is operated by a US company. Personal data is transferred to and processed in the USA and, through our providers, possibly in other countries. Where the GDPR applies, transfers are based on the EU-US Data Privacy Framework (where the recipient is certified), the European Commission's Standard Contractual Clauses, or, where applicable, your explicit consent (Art. 49(1)(a) GDPR). The USA may not offer a level of data protection equivalent to the EU, and US authorities may access data under certain conditions.

7. Retention

We keep personal data only as long as necessary for the purposes above. Identity verification and transaction records are kept for at least five years after the end of our business relationship where anti-money-laundering or tax rules require it. Waitlist data is deleted when you unsubscribe or after the launch phase if you don't open an account.

8. Your rights

Where the GDPR applies, you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority. Residents of California have additional rights under the CCPA/CPRA. Contact: support@paythirteen.com or our EU representative (see section 2).

9. Security

Data is transmitted encrypted (TLS). Access is restricted to the people who need it to run your account. Members can protect their account with two-factor authentication.

10. Cookies

See our Cookie Notice at /legal/cookies.

11. Changes

We may update this policy. The current version is always available on this page.