ACH Privacy Policy

ACH Payment Privacy Statement

Professional Audio Engineering & Mixing Services
Effective date: 10/01/25

We only collect the minimum bank information necessary to process your payments for our audio engineering and mixing services. We do not sell or share your financial information for advertising or any unrelated purposes.


1) Who we are

Controller: elaboratAV.com
Address: Lewisville, Texas 75057, USA
Services: Professional audio engineering and mixing services


2) What we collect for ACH payments

We collect information in two ways: (a) what you provide for payment processing; and (b) what Stripe collects automatically for security.

2.1 Information you provide

  • Bank account details — routing number, account number, account type (checking/savings)
  • Basic billing information — name, billing address, email for receipts
  • Service details — project name, invoice number (for matching payments to services)

We do not store your actual bank account numbers. Stripe tokenizes and securely stores this information on our behalf.

2.2 Information collected automatically

  • Transaction metadata — timestamp, IP address (for fraud prevention)
  • Verification data — micro-deposit confirmations or instant verification results

3) Why we use your information

We process bank information solely to:

  • Process authorized payments for audio services you’ve contracted
  • Send payment confirmations and receipts
  • Process refunds when applicable
  • Prevent fraud and unauthorized transactions
  • Maintain required records for tax and legal compliance

Legal bases (where applicable): Contract performance (processing your payment); legitimate interests (security, fraud prevention); legal obligations (tax records).


4) How we share information

We do not sell or share your bank information. We only disclose it to:

  • Stripe, Inc. — our PCI-compliant payment processor (processes ACH transfers)
  • Banking networks — as required to complete ACH transactions
  • Legal authorities — only when required by law or court order

Stripe is certified to PCI Service Provider Level 1 and handles your bank information according to their privacy policy at https://stripe.com/privacy.


5) ACH authorization

By providing your bank account information, you authorize us to:

  • Debit your account for agreed service fees
  • Initiate credits for any refunds
  • Perform account verification (micro-deposits or instant verification)

You may revoke this authorization at any time by contacting us or removing your payment method.


6) Data retention

  • Transaction records: 7 years (tax/legal requirements)
  • Tokenized payment methods: Until you remove them or close your account
  • Verification data: 90 days after verification complete

7) Security

Your bank information is:

  • Encrypted during transmission buy Stripe. (TLS 1.2+)
  • Tokenized by Stripe (we never see or store actual account numbers)
  • Protected by multi-factor authentication
  • Subject to NACHA Operating Rules for ACH transactions

8) Your rights

You can:

  • Access your payment history and saved payment methods
  • Update or remove your bank account information at any time
  • Request deletion of payment data (subject to legal retention requirements)
  • Opt-out of non-essential payment communications

California residents: See additional rights under CCPA at CA.org
EEA/UK residents: See GDPR rights at GDPR-Info.eu

To exercise these rights, contact us via email.


9) Compliance

We comply with:

  • NACHA Operating Rules for ACH transactions
  • Applicable U.S. banking regulations
  • State privacy laws where applicable (CCPA, etc.)
  • GDPR where applicable for international clients

10) Changes

We’ll notify you via email of any material changes to how we handle your payment information.


Acceptance

By selecting ACH payment and providing your bank information, you acknowledge you’ve read this statement and consent to the processing described above.