Transaction Security Policy

1. Payment Processor

All payment transactions on Partikl are processed by [PAMYENT_PROCESSOR_REQUISITES], a licensed payment service provider operating under the supervision of the National Bank of Georgia

Partikl (Aleksei Umanchenko I/E, 346991687) does not process card payments directly. We act as the merchant; [NAME] acts as the payment processor.

2. Card Data Security

We do not store your card details.

When you enter payment information:

• You are redirected to or shown a secure payment page hosted by [NAME]
• Your card number, CVV, and expiration date are entered directly into [NAME]'s PCI DSS-certified environment
• Partikl servers never receive, transmit, or store your full card number or CVV
• Only a tokenized reference (last 4 digits + card type) is stored by Partikl for display purposes

Our payment processor maintains PCI DSS Level 1 compliance — the highest level of payment security standard.

3. Encryption in Transit

All communication between your browser and Partikl is protected with:

• TLS 1.2 / 1.3 encryption
• HTTPS enforced on all pages — no unencrypted connections
• HSTS (HTTP Strict Transport Security) enabled
• Certificate via trusted CA

Payment page communications are additionally secured by [PROCESSOR_NAME] own TLS infrastructure.

4. Fraud Prevention

Transactions on Partikl are subject to:

• Authorization verification by the card issuer before any charge is applied
• 3D Secure (3DS) authentication where required by your card issuer or our payment processor
• Automated fraud monitoring by [NAME]'s risk systems
• Transaction limits established in compliance with payment network rules

Suspicious transactions may be declined to protect you. If your legitimate transaction is declined, contact billing@partikl.io.

5. Your Responsibilities

To maintain transaction security:

• Use a card you are authorized to use
• Do not share your Partikl account credentials
• Enable two-factor authentication on your account
• Contact us immediately at security@partikl.io if you suspect unauthorized account access
• Report unrecognized charges to us before initiating a chargeback — we resolve most issues within 24 hours

6. Data Retention

Transaction records (amount, date, plan, last 4 digits) are retained for 6 years in compliance with Georgian accounting and tax regulations.

Card details themselves are retained only by [NAME] in accordance with PCI DSS requirements and their own privacy policy.

7. Incident Response

In the event of a security incident affecting payment data:

• We will notify affected users within 72 hours of becoming aware of the incident
• We will cooperate fully with [NAME] and relevant authorities
• We will take immediate steps to contain and remediate the incident

To report a security concern: security@partikl.io

8. Contact

For transaction security questions:

Email: security@partikl.io
Billing issues: billing@partikl.io
Operator: Aleksei Umanchenko I/E, 346991687, 19 Akaki Tsereteli St, Batumi, Georgia