FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

WePay

PreferencesOfficial website

WePay, a JPMorgan Chase company, is an integrated payments provider offering iframe and hosted checkout, tokenization through wepay.js and onboarding for software platforms.

Block WePay until consentScan my site
Overview

What does WePay do?

What WePay is

WePay is an integrated payments provider owned by JPMorgan Chase in the United States. It serves software platforms and independent software vendors with iframe and hosted checkout, tokenization and merchant onboarding, and the legacy product is being migrated into Chase.

Data and cookies collected

The checkout loads wepay.js and hosted fields and sets functional cookies to operate the flow and fraud cookies to protect transactions. Payment details are tokenized so that card data does not pass through the platform server, and onboarding collects business and identity information for verification.

GDPR and ePrivacy implications

Strictly necessary checkout cookies are generally exempt from the consent rule in the ePrivacy Directive because they deliver a service the user requested. Processing rests on contract for payments, on legal obligations for financial rules, and on legitimate interests for fraud prevention.

Consent requirements

Consent is not needed for the strictly necessary checkout and fraud cookies, but any analytics or marketing cookies a platform adds around the WePay flow require prior consent. Keep these categories clearly separated in the consent banner.

International data transfers

WePay processes data in the United States as part of JPMorgan Chase, so European platforms carry out a transfer to a third country. This should be covered by Standard Contractual Clauses, a transfer impact assessment and supplementary safeguards, reviewed alongside the migration into Chase.

Practical compliance steps

Sign the applicable data processing agreement, document the US transfer and the legal bases, and describe the necessary checkout and fraud cookies in your cookie policy. Track the migration into Chase so that contracts and privacy notices stay accurate as the product changes.

Compliance

WePay and the GDPR

Legal basis
Performance of a contract under Article 6(1)(b) GDPR for processing payments, legal obligation under Article 6(1)(c) GDPR for financial and anti money laundering rules, and legitimate interests under Article 6(1)(f) GDPR for fraud prevention
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, PSD2, and applicable US financial regulations

Impact assessment (DPIA)

A DPIA should consider that WePay processes payment and onboarding data in the US as part of JPMorgan Chase, and that the legacy product is being migrated into Chase. Assess the US transfer, the fraud processing and any change of controller or processor arising from the migration.

Sample text for your banner

We use WePay, a Chase company, to process your payment securely. Strictly necessary cookies that complete the checkout and support fraud prevention are always active. Any analytics or marketing cookies are set only with your consent, which you can withdraw at any time.
Cookies and trackers

What WePay sets and contacts

Tracking method
Iframe and hosted checkout with tokenization through wepay.js, plus onboarding for software platforms, supported by functional and fraud cookies
Server location
United States
Data transferred outside the EU
Personal data is processed in the United States by WePay, a JPMorgan Chase company, a third country under the GDPR. Where European data is involved, transfers rely on the Standard Contractual Clauses together with supplementary measures.

Cookies set (4)

NameTypeDurationPurpose
Checkout session cookieThird-partySessionMaintains the state of the WePay iframe and hosted checkout during the session
Fraud prevention cookieThird-party1 yearSupports fraud detection and protects the integrity of payment transactions
Functional preference cookieThird-party1 yearStores functional settings and security preferences for the WePay interface
Onboarding session cookieThird-partySessionKeeps state during merchant onboarding and identity verification flows

Third-party domains contacted (5)

  • wepay.com
  • api.wepay.com
  • static.wepay.com
  • stage.wepay.com
  • cdn.wepay.com
Questions

Frequently asked questions about WePay

Can't find your question? Write to us, we answer fast.

What cookies does WePay set?

WePay sets functional cookies needed to operate the iframe and hosted checkout and fraud cookies that help protect transactions. The exact set depends on the integration and whether the legacy WePay product or the Chase platform is used.

Is consent required for WePay?

Consent is not required for the strictly necessary checkout and fraud cookies, which are exempt because they deliver a service the user requested. Consent is required for any analytics or marketing cookies a platform adds around the WePay checkout.

What is the legal basis for WePay?

Processing rests on performance of a contract under Article 6(1)(b) for completing payments, legal obligation under Article 6(1)(c) for financial and anti money laundering rules, and legitimate interests under Article 6(1)(f) for fraud prevention.

Does WePay transfer data to the US?

Yes. WePay processes data in the United States as part of JPMorgan Chase, so European platforms carry out a transfer to a third country. This should be covered by Standard Contractual Clauses and supplementary safeguards, reviewed alongside the migration into Chase.

Is a DPIA needed for WePay?

A DPIA is advisable because WePay processes payment and onboarding data in the US and the legacy product is being migrated into Chase. The assessment should cover the US transfer, fraud processing and any change of controller or processor from the migration.

How do I implement WePay compliantly?

Sign the applicable data processing agreement, document the US transfer and the legal bases, and describe the necessary checkout and fraud cookies in your cookie policy. Keep any added analytics behind consent and track the migration into Chase.

What are alternatives to WePay?

Alternatives for platform and integrated payments include Stripe Connect, Adyen for Platforms, Square and PayPal for Marketplaces. Each differs in server locations, cookie behaviour and transfer mechanisms that should be reviewed individually.

How do I update my cookie policy for WePay?

Add a WePay entry that lists the necessary checkout and fraud cookies with their purposes and durations, the US transfer and the safeguards in place. Note the migration into Chase and keep the entry current as your integration moves to the Chase platform.

Same category

More services: E-commerce

See the whole category

Price By Country

Price By Country is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Price By Country supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Price By Country enables informed decisions that improve experience and drive results.

Preferences

Carussel

Carussel is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Carussel integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Carussel helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

NightsBridge

NightsBridge is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. NightsBridge supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, NightsBridge ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Talex

Talex is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Talex supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Talex ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Buyist

Buyist is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Buyist integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Buyist helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Shop Pay Installments

Shop Pay Installments is a comprehensive e-commerce platform that provides businesses with all the tools needed to build, manage, and grow an online store. From product catalog management and secure payment processing to inventory tracking and order fulfillment, Shop Pay Installments delivers a complete commerce solution. It features responsive storefront themes, SEO-optimized product pages, and powerful marketing tools to help merchants increase visibility and drive sales across channels.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site