Privacy Policy

Last Updated: October 3, 2026

Raftpay, LLC (“Company,” “we,” “us,” or “our”) operates the website at passportrebate.com (the “Site”) and the Kurv Petro Passport Rebate Program (the “Program”). This Privacy Policy explains how we collect, use, share, and protect information about station owners, their employees, and other people who visit the Site, contact us, or apply for the Program.

The Site and Program are intended for businesses. This Privacy Policy does not cover card-processing services, which are provided by Kurv Petro and its sponsor bank under the Merchant Agreement and their own privacy notices. Capitalized terms not defined here have the meanings given in our Program Terms of Use.

1. Categories of Information We Collect

We may collect a variety of information from or about you or your devices from various sources, as described below.

Information you provide to us.

• Contact and business details: your name, company, email address, phone number, station or chain name, number of locations, estimated monthly card volume, current processor and contract status, and any notes you send.
• Processing statements: statements you upload or email so we can assess eligibility and prepare a savings analysis. These may include business name and address, card volume, fees, and partial account or merchant ID numbers.
• Application and onboarding information: information needed to underwrite and open a Merchant Account, which may include owner names, addresses, dates of birth, Social Security or tax ID numbers, and bank account details.
• Rebate payment information: IRS Form W-9 details and the bank or mailing information we use to pay Rebates and ETF Reimbursements.
• Communications: emails, phone calls, and live chat messages with us.

Information collected automatically.

When you visit the Site, we and our service providers may collect device and usage information, such as IP address, browser type, pages viewed, referring URLs, and the date and time of your visit.

Cookies are pieces of text that may be provided to your computer through your web browser when you access a website. Your browser stores cookies in a manner associated with each website you visit. The Site uses cookies and similar technologies that are necessary for it to function, such as those that operate the live chat and the file upload. We do not use advertising or retargeting cookies.

You can block or delete cookies through your browser settings, although some features of the Site may not work without them.

Information we collect from others.

We may receive information about you from Kurv Petro and its sponsor bank (such as approval status and Activation dates), from equipment and installation partners, and from independent agents or distributors who refer your business to us.

2. How We Use and Process the Information We Collect

We process and use the information we collect to:

• respond to inquiries and provide a savings analysis;
• determine Program eligibility and Rebate tier, and verify statement data;
• coordinate Merchant Account applications, POS installation, and Activation;
• pay Rebates and ETF Reimbursements, and administer repayment and collection under the Program Terms of Use;
• provide customer support;
• send Program updates and, where permitted, marketing about our services (you may opt out at any time);
• detect and prevent fraud, misrepresentation, and misuse;
• comply with legal, tax, and card-brand obligations and enforce our agreements; and
• operate, secure, and improve the Site.

3. How We Disclose the Information We Collect

We share information only as follows:

• Kurv Petro and its sponsor bank, to evaluate, underwrite, open, and service your Merchant Account and to confirm eligibility for the Rebate.
• Service providers, such as hosting, email, file storage, chat, payment, and accounting vendors, and certified POS technicians. They may use the information only to perform services for us.
• Referring agents and distributors, limited to the status of your application and Activation, so they can support your onboarding and receive any referral compensation.
• Professional advisors, such as lawyers, accountants, and auditors.
• Legal and safety reasons, to comply with law, subpoena, or card-brand rules; to enforce our agreements, including collection of amounts owed; or to protect the rights, property, or safety of any person.
• Business transfers, in connection with a merger, financing, sale of assets, or similar transaction.
• With your consent or at your direction.

4. Processing Statements and Sensitive Data

Please redact full card numbers, full bank account numbers, and any cardholder data before sending us a statement. The Site is not designed to receive cardholder data, and we ask that you never send it through the Site, chat, or email.

We use statements only for eligibility, savings analysis, underwriting, and Rebate verification. Access is limited to personnel and partners who need it for those purposes. Sensitive information needed for underwriting, such as Social Security numbers and bank details, is collected through Kurv Petro’s secure application process and is not stored on the Site.

5. How Long We Store Your Information

We keep information for as long as needed for the purposes described in this Privacy Policy and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:

• mandated by law, contract or similar obligations applicable to our business operations;
• for preserving, resolving, defending or enforcing our legal/contractual rights; or
• needed to maintain adequate and accurate business and financial records.

When information is no longer needed, we delete or de-identify it.

6. How We Store and Protect Your Information

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information. Information you send by ordinary email, including through the Site’s contact form, travels over the public internet, and we cannot guarantee its security before it reaches us.

7. State Privacy Rights

Depending on your state of residence, you may have rights and choices under applicable privacy laws to:

• confirm whether we process your personal data and access it;
• correct inaccuracies;
• delete personal data;
• obtain a portable copy of your data;
• opt out of the sale of personal data, targeted advertising, and certain profiling (we do not engage in these activities); and
• not be discriminated against for exercising these rights.

To make a request, email info@passportrebate.com. We will verify your identity before responding and may ask for information to do so. An authorized agent may submit a request on your behalf with proof of authorization. If we can’t verify your identity, we will not be able to fulfill your request.

California residents: in the preceding 12 months we have collected the categories of personal information described in Section 1 (identifiers, commercial information, professional information, financial information in rebate payment records, and internet activity) from the sources in Section 1, for the purposes in Section 2, and disclosed them to the categories of recipients in Section 3. We do not sell or share personal information and do not use sensitive personal information for purposes that would require a right to limit.

8. Your Choices

• Marketing emails: use the unsubscribe link in any marketing email, or contact us. We will still send messages about your application, account, or Rebate.
• Access and correction: you may ask to see or correct information we hold about you or your business.
• Deletion: you may ask us to delete information, subject to our need to keep records for the Program, legal compliance, and enforcement of our agreements.

9. Third Party Sites and Services

The Site may link to or embed services operated by others, including Kurv Petro, POS manufacturers, and our chat provider. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. Their collection and use of information is governed by their own privacy policies. We encourage you to read their privacy policies before providing any information to them.

10. Children’s Privacy

The Site is intended for businesses and is not directed to children under 13. We do not knowingly collect, maintain, or use personal information from children.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site with a new “Last updated” date. If we make material changes, we will provide additional notice as required by law.

12. Contact Information

Questions or requests about this Privacy Policy may be sent to:

We will provide reasonable and timely assistance to you to resolve your concerns.