Privacy Policy
PaymentPutty is a product of MoJo Active, Inc. ("MoJo Active", "we", "us"). This policy explains what we collect when merchants install PaymentPutty on their BigCommerce store and when shoppers interact with features PaymentPutty adds to a merchant's storefront and checkout. It applies to ww
Last updated: September 16, 2026
Who we are
MoJo Active, Inc. 116 Main St, Watsontown PA 17777 [email protected]
Registered SMS brand name: MoJo Active, Inc. (PaymentPutty).
Roles
Merchants who install PaymentPutty are the controllers of their shoppers' data. We process that data on the merchant's instructions to provide the app. When you shop on a merchant's store, that merchant's privacy policy also applies to you.
What we collect
From merchants (app users)
- Account details: name, email address, BigCommerce store hash and store name, billing contact.
- Store configuration you enter in PaymentPutty, such as checkout rules, fees, notification recipients, branding, and sending domains.
- Technical logs of app activity for support and security.
From shoppers, on a merchant's behalf
- Order and checkout data needed to run the features the merchant has enabled, such as cart contents, shipping and billing addresses, and order totals.
- Information you type into PaymentPutty form fields at checkout, such as custom order data, uploaded files, or acknowledgements.
- Gift message data, described in the next section.
Automatically
- Standard web server logs (IP address, browser type, pages requested, timestamps) for security, abuse prevention, and troubleshooting. We do not use advertising trackers on paymentputty.com.
SMS and gift message data
When a shopper uses the PaymentPutty gift message feature on a merchant's store, we collect:
- the recipient's name and either their mobile number or email address,
- the sender's name and optional signature,
- the message text, and
- the delivery date the shopper selected.
We use this data solely to deliver that gift message on the merchant's behalf, by email or by a single text message, at the time of purchase or on the selected date. Text messages are sent from (412) 467-0145. We send one message per gift. We do not send marketing messages to gift recipients.
Consent for text delivery is collected from the purchaser at checkout, who confirms that the recipient agrees to receive one text message. Any recipient can stop further messages from our number at any time by replying STOP, and can get help by replying HELP. Opt-outs apply across every merchant that uses PaymentPutty.
We retain gift message data with the merchant's order record and delete it when the merchant uninstalls PaymentPutty, or earlier on the merchant's request. Phone numbers that have opted out are kept on a suppression list so we never text them again.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
How we use data
- To provide, operate, and support the PaymentPutty app and the features merchants enable.
- To send transactional emails and text messages a merchant or shopper has requested.
- To bill merchants for their subscription and usage.
- To detect abuse, secure our systems, and comply with law.
We do not use shopper data for advertising, profiling, or any purpose beyond the merchant's instructions.
Who we share data with
We share data only with service providers that help us run PaymentPutty, each bound by contract to use it only for that purpose:
- BigCommerce, which hosts the merchant's store and where order data lives.
- Amazon Web Services, for hosting and for sending email (Amazon SES).
- Twilio, for sending text messages.
- Cloudflare, for edge processing and short-lived operational storage.
- Stripe, for merchant billing where applicable.
We may disclose data if required by law or to protect our rights, our users, or the public. We do not sell personal information.
Data retention
Merchant account data is kept for the life of the account and for up to 90 days after uninstall, then deleted, except where we must keep billing records. Shopper data processed on a merchant's behalf is kept as long as the merchant's order records require and is deleted when the merchant uninstalls the app. Server logs are kept for 90 days.
Security
Data is encrypted in transit and at rest. Store credentials are encrypted with keys that are not stored alongside the data. Access to production systems is limited to staff who need it and is logged.
Your rights
Depending on where you live you may have the right to access, correct, delete, or export your personal information, or to object to certain processing. If you are a shopper, please contact the merchant you purchased from, since they control your data; we will help them fulfil your request. If you are a merchant, or if you cannot reach the merchant, email [email protected].
California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use sensitive personal information for purposes other than providing the service.
Children
PaymentPutty is not directed to children under 13 and we do not knowingly collect their information.
Changes
We will post any changes to this page and update the date above. Material changes will be announced to merchants by email.
Contact
MoJo Active, Inc., [email protected]