Who we are and what this policy covers

Superior Web Monitoring ("SUPWM," "we," "us," or "our") is a service operated by Superior Payments, LLC, SUPWM’s parent company, with offices in Tampa, Florida, United States. This policy covers the SUPWM public website, customer and administrator portals, signup and billing experiences, communications, PCI SAQ workspace, Shopping Cart Monitor, merchant-intelligence services, integrations, reports and related support.

When we process personal information in customer-provided merchant records under a customer’s instructions, the customer generally determines the purpose and means and SUPWM acts as its service provider or processor. For account administration, billing, security, marketing and our own operations, Superior Payments, LLC generally acts as the controller or business.

Information we collect

Depending on how you interact with SUPWM, we may collect:

• Account and identity information: name, work email, organization, role, authentication identifiers, permissions and account activity. Microsoft Entra or another provider verifies credentials; SUPWM does not receive passwords, biometric templates, PINs or passkey private keys.
• Commercial and billing information: selected plan, add-ons, interval, trial and subscription status, invoices, transaction references, billing contacts and limited payment metadata.
• Customer and merchant information: merchant names, domains, business identifiers, portfolio relationships, contact information, policies, review notes, decisions, evidence metadata and monitoring settings supplied through authorized workflows.
• Monitoring information: public website content, URLs, script inventories, change observations, technical fingerprints, timestamps, screenshots and other evidence collected within an authorized scope.
• PCI SAQ and report information: answers, attestations, responsible contacts, renewal dates, report parameters, artifacts and audit history.
• Communications and technical information: inquiries, support requests, preferences, IP address, browser and device type, referring page, session timestamps, application telemetry, errors, security events and audit records.

Sources of information

We receive information directly from users and customers; authorized customer systems and integrations; identity, billing, hosting, communications and security providers; publicly accessible business websites and records; and contracted service partners. Customers are responsible for having authority to provide information and instruct monitoring.

How we use information

We use personal information to provide, secure and administer SUPWM; authenticate users and enforce permissions; create accounts and subscriptions; process payments and trials; deliver monitoring, merchant-intelligence, PCI SAQ, reporting and integration workflows; respond to inquiries; detect misuse; maintain evidence and audit trails; improve reliability; communicate service, security and renewal information; comply with law and contracts; and establish or defend legal claims.

Where applicable, our legal bases may include contract performance, steps requested before a contract, legitimate interests in operating and securing a business service, legal obligations and consent. SUPWM does not make a solely automated decision that produces legal or similarly significant effects for an individual. Customer organizations retain responsibility for final merchant, underwriting and compliance decisions.

Payments and subscriptions

The active payment gateway supplies tokenized or hosted payment fields. SUPWM is not designed to receive or store full card numbers or card security codes. We may receive provider customer and subscription identifiers, payment status, card brand and last four digits.

The provider processes card information under its own privacy notice. We may change providers and will update relevant notices if a change materially affects privacy practices.

Cookies, telemetry and similar technologies

We use storage and similar technologies needed for authentication, security, preferences, session continuity and checkout. Production application telemetry may record performance, errors, request timing and limited device or network information.

We do not use the public website for cross-site behavioral advertising, sell personal information, or share it for cross-context behavioral advertising. Where applicable law treats a recognized browser opt-out signal as a request, we process it as required for that browser and device.

How we disclose information

We may disclose information to hosting, cloud, identity, payment, email, support, analytics, security and professional-service providers; the customer organization managing the account or merchant; integration destinations the customer configures; authorities or other parties when reasonably necessary for legal process, rights or safety; and parties to a merger, financing, acquisition or sale, subject to appropriate safeguards.

Providers may use information only for authorized purposes. We do not sell personal information for money.

Retention

We retain information only as long as reasonably necessary for the purpose collected, customer instructions, configured evidence policies, security and audit needs, billing and tax records, disputes and legal obligations. Retention differs by record type and contract.

When retention ends, we delete, deidentify or securely isolate information unless law permits or requires continued retention. We may keep minimal suppression records after an email opt-out and backup copies for a limited recovery cycle.

Security and incident response

We use safeguards designed for the information, including identity and access controls, least privilege, encryption, tenant separation, logging, monitoring, retention controls and governed evidence workflows. No service can guarantee absolute security.

Report suspected compromise to security@supwm.com. We investigate suspected incidents and provide legally required notices consistent with law and contracts.

Privacy rights and requests

Depending on your location and applicable law, you may have rights to know or access information; obtain a portable copy; correct or delete information; restrict or object to processing; opt out of sale, sharing, targeted advertising or certain profiling; limit certain sensitive-information uses; withdraw consent; appeal a denied request; and receive no discriminatory treatment for exercising rights.

Submit requests to privacy@supwm.com. We verify identity and authority using information appropriate to the request. Authorized agents may act where permitted. If we process information solely for a customer, we may direct the request to that customer.

To stop non-transactional email, use the email link or visit supwm.com/unsubscribe. Necessary account, billing, security and service notices may continue.

International use and transfers

SUPWM is operated from the United States. When information is transferred from another country, we use contractual, organizational or other safeguards required by applicable law. U.S. law may differ from the law where a user lives.

Children

SUPWM is a business service for adults acting professionally. It is not directed to children under 13 or intended for use by anyone under 18. We do not knowingly collect children’s personal information through the service.

Changes to this policy

We may update this policy as services, providers or laws change. We will post the revised version and date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

Contact us

Where applicable, appeal a response by replying with “Privacy Appeal” in the subject line and explaining why it should be reconsidered.