Data Protection

Tourney Direct takes data security and the protection of sensitive user information seriously.

For highly sensitive data such as Social Security numbers and banking information, we do not store or manage this data directly within our platform. Instead, we leverage Stripe, a leading, PCI-compliant payment processor, to securely handle all payment-related information.

This means:

• All banking and payment details are encrypted and securely stored by Stripe
• Tourney Direct does not have direct access to full financial account details
• Payments and payouts are processed through secure, industry-standard infrastructure

For personal information such as Social Security numbers (when required for 1099 compliance), data is:

• Collected and transmitted securely
• Stored using encrypted systems with restricted access
• Managed according to standard data protection and privacy practices
• Only the last four digits of a user's Social Security number are required.

We follow best practices around:

• Data encryption (in transit and at rest)
• Access controls and permission-based systems
• Secure authentication and user management

Our goal is to minimize risk by ensuring sensitive data is handled through trusted, compliant providers wherever possible.

TD Pay, powered by Stripe, includes 5 layers of data protection starting with strong password creation recommendations through encryption at rest.