Privacy Policy
Last updated: June 2026
1. Overview
This Privacy Policy describes how Phase 3 Payments, Inc. ("Phase 3 Payments," "we," "us," or "our") collects, uses, discloses, and protects information when you use Phase 3 Benefits products and services, including phase3benefits.com, the Phase 3 Benefits mobile app, the admin portal, and the Phase 3 Benefits API.
Phase 3 Benefits handles two distinct categories of information: business information from employers, partners, and administrators; and member-level information from individuals who hold a Phase 3 Benefits account. Where applicable, this policy works alongside our Business Associate Agreements with employer and partner customers.
2. Information we collect
We collect information you provide directly (name, email, employer, demo and partner-application form fields), information you create by using our products (transactions, claims, eligibility lookups, support conversations), and information we receive from third parties (your employer or HRIS, your sponsor bank, our identity-verification providers).
When you submit a form on our website—such as a book-a-demo request or a newsletter sign-up—we store the details you enter (for example name, work email, company, role, and any notes you include) together with technical information such as your IP address and browser user-agent, which we use to operate the form and to detect and prevent spam and abuse.
Member-level data may include name, address, date of birth, partial SSN for KYC, health-related transaction metadata, contribution and reimbursement records, and device identifiers from the mobile app.
3. How we use information
We use information to operate the Phase 3 Benefits platform, issue and service cards, process contributions and reimbursements, verify identity, prevent fraud, provide member and admin support, improve our products, communicate about features and security, and meet our regulatory and contractual obligations.
We do not sell personal information. We do not use protected health information for advertising.
5. Security
We use industry-standard security controls including TLS 1.2+ encryption in transit, AES-256 encryption at rest, role-based access control, audit logging, network isolation for payment data, and continuous monitoring.
6. Your choices and rights
Subject to applicable law, you may access, correct, delete, and export personal information we hold about you, opt out of marketing communications, and exercise rights under the CCPA, CPRA, and other applicable state privacy laws. To make a request, email [email protected].
7. Data retention
We retain information for as long as needed to provide the service, meet our regulatory and contractual obligations (including IRS recordkeeping requirements for HSA and FSA accounts, generally seven years), resolve disputes, and enforce our agreements.
Information you submit through website forms, such as book-a-demo requests and newsletter sign-ups, is retained for as long as needed to respond to your inquiry and manage our communications with you, and is then deleted or anonymized when it is no longer required for those purposes. You may ask us to delete this information at any time using the contact details below.
8. Changes to this policy
We will post any material changes to this policy on this page and update the "Last updated" date. For material changes, we will provide additional notice (such as email or in-app notice).
9. Contact
Email [email protected] or write to: Phase 3 Payments, Inc., Attn: Privacy, 2304 S Westlake Dr, Sioux Falls, SD 57106. For accessibility issues, see our Accessibility Statement.