Prava-Payments API for AI Agents

Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains how Prava Payments Inc, 8 The Green, STE R, Dover, DE 19901, USA, collects, uses, shares, and protects personal data when you use Prava Pay, Prava Wallet, Prava SDK, Prava APIs, Prava dashboards, Prava websites, or embedded Prava payment flows.

This Policy applies when you create an account, sign in, add a card, approve a payment, create a mandate, authorize an agent, use Prava in a third-party application, or integrate Prava as a developer.

1. Data we collect

We may collect account data, authentication data, card and payment data, checkout and agent data, developer data, OAuth data, usage data, fraud signals, support messages, workflow logs, and technical diagnostics. Raw card numbers and CVV are collected through secure payment and vaulting flows. Prava does not store raw card numbers or CVV in its application databases.

2. How we use data

We use data to create and secure accounts, authenticate users, enroll cards, create payment permissions, issue scoped payment credentials, route approved payment instructions, operate APIs and SDKs, support embedded payment flows, prevent fraud, provide support, improve reliability, and comply with law, card-network rules, payment partner rules, and contracts.

3. How data is shared

We may share data with card networks, including Visa, Mastercard, and other supported networks where applicable, issuing banks, acquiring banks, PSPs, processors, vaulting providers, money transmission partners, merchants, cloud providers, security vendors, support providers, OAuth providers, analytics providers, and developer applications as needed to provide Prava. Prava may not have a direct relationship with every bank, network, acquirer, PSP, merchant, or regulated party involved in a transaction. We do not sell personal data to advertisers or data brokers.

4. Embedded payment flows

If you use Prava inside a third-party app, website, or AI agent experience, that third party may receive limited data needed to operate the integration, such as approval status, transaction status, mandate status, merchant, amount, currency, and payment metadata. That third party is responsible for its own product, privacy notices, and data practices. Prava is responsible for Prava-controlled processing described in this Policy.

5. Agents and payment credentials

AI agents and apps do not receive your underlying card number or CVV. In approved workflows, an agent or browser automation layer may receive scoped payment credentials for checkout. Those credentials are limited by the payment permission or mandate you approve.

6. Google data

If you use Google sign-in or connect Google data, Prava uses Google data only for user-facing features, authentication, security, support, or compliance. Prava does not sell Google user data, use it for advertising, or transfer it except as allowed by Google's API Services User Data Policy.

7. Retention

We retain personal data only as long as needed to provide Prava, comply with law, resolve disputes, enforce agreements, prevent fraud, meet payment and audit obligations, and protect security. Card and vault data is retained in a PCI-compliant vault according to applicable regional, regulatory, payment, audit, security, and recovery requirements.

8. Your rights and choices

You may request access, correction, deletion, or account closure by contacting support@prava.space. Some data may be retained where required for legal, payment, tax, audit, fraud-prevention, dispute, security, or partner compliance reasons. Regional privacy rights may apply depending on where you live and where Prava makes the service available.

9. International processing

Prava is currently intended for users in the United States. Data may be processed in the United States and other locations where Prava, payment partners, or service providers operate. Singapore, Hong Kong, and Canada availability is subject to legal, regulatory, payment partner, and product readiness requirements.