YOUR APPLICATION INFORMATION
Privacy notice
Effective November 2, 2026. This notice covers the Northline merchant application intake website and the team reviewing applications through it.
Information requested
The application requests legal business and DBA details, business address and contact information, tax ID/EIN, ownership and location tenure, websites, products/services, processing preferences and volume, and application contact information. For each listed owner or control person, it requests name, ownership, role, home address, residence tenure, ID type and number, Social Security number, date of birth, phone, and email. Business banking fields include the holder, account type, bank name, routing number, and account number. Never provide bank login passwords or payment card numbers.
Identity photos and supporting documents
Every application requires the front and back of a driver license for each listed owner/control person. Full-document links also require a voided check or bank letter, three bank statements, a fulfillment agreement, formation/incorporation documents for registered entities, and three processing statements when the business already accepts cards. Photo-ID-only links make those supporting documents optional. Uploads start when you select a file; they are stored separately from the final form submission. Images are converted to JPEG and embedded metadata is removed. PDFs are accepted for supporting documents only.
Use and sharing
Your information, documents, and authorization are used to review your merchant account needs, contact you about the application, request missing information, and prepare a handoff to payment processing partners. Authorized administrators can view records, confirm their password to reveal protected information, and download documents or complete processor packages. Processor sharing is performed manually by the review team using its selected channel; the website does not automatically send applications to processors. Partners have their own verification processes and privacy notices. Information is not sold or used for advertising on this website.
Storage, access, and retention
The site is hosted on Railway. Application contents and uploaded file contents are encrypted in storage, and admin access requires authentication. Full sensitive values and document downloads additionally require recent password confirmation. Submitted records and files remain until removed under the operating team’s retention process. Archiving does not delete records. No automatic deletion schedule is configured for submitted applications. Unsubmitted upload sessions expire after about two hours; abandoned uploads are then removed by periodic cleanup while the service is running. Files downloaded by applicants or administrators are stored on the downloading device.
Application links and cookies
Your representative may provide a private application link with an expiry and submission limit. Anyone holding an active link can start an application. Protect the link and share it only with the intended applicant. The site records which link was used when a submission is received. Admin access uses an essential HTTP-only session cookie. Unsubmitted text fields and the application session token are held in tab memory and clear on reload. No marketing analytics are installed. Fonts load from Google Fonts; your browser may transmit connection information to that service.
Your authorization and questions
Only submit information and documents you are authorized to provide about the business and its owners. Final submission records your authorization and its timestamp. It does not open an account, run a credit check, complete identity verification, or guarantee approval. For corrections, access/deletion requests, or questions, contact the person or organization that directed you to this application and provide your reference if available. Do not send SSNs, ID photos, or bank information in ordinary email.