Your privacy isour priority.
We are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data. This policy explains our practices in detail.
Information We Collect
Personal Information
When you create an account or use our services, we may collect personal information such as your name, email address, phone number, and billing information. This information is necessary to provide our payment processing services.
Transaction Data
We collect information about transactions processed through our platform, including payment amounts, timestamps, payment methods, and transaction status. This data is essential for providing our core services and maintaining accurate records.
Technical Data
We automatically collect technical information when you use our services, including IP addresses, browser type, device information, and usage patterns. This helps us improve our services and ensure security.
API Usage Data
For developers using our APIs, we collect information about API calls, integration patterns, and performance metrics to ensure service quality and provide support.
How We Use Your Information
Service Delivery
We use your information to process payments, manage your account, provide customer support, and deliver the services you've requested.
Security & Fraud Prevention
Your data helps us detect and prevent fraudulent transactions, unauthorized access, and other security threats to protect both you and our platform.
Service Improvement
We analyze usage patterns and feedback to improve our services, develop new features, and enhance the overall user experience.
Communication
We may use your contact information to send important service updates, security alerts, and, with your consent, marketing communications about new features and offerings.
Data Sharing & Disclosure
Payment Providers
We share necessary transaction data with payment providers (M-Pesa, Airtel Money, banks) to process your payments. These providers have their own privacy policies governing their use of data.
Service Providers
We work with trusted third-party service providers who assist us in operating our platform. These providers are contractually bound to protect your data and use it only for specified purposes.
Legal Requirements
We may disclose your information when required by law, to comply with legal processes, or to protect the rights, property, and safety of PayLink, our users, or others.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
Data Security
Encryption
All data transmitted to and from our platform is encrypted using industry-standard TLS/SSL protocols. Sensitive data at rest is encrypted using AES-256 encryption.
Access Controls
We implement strict access controls to ensure that only authorized personnel can access your data, and only when necessary for legitimate business purposes.
Security Audits
We regularly conduct security audits and penetration testing to identify and address potential vulnerabilities in our systems.
Incident Response
We have established procedures for responding to data breaches and security incidents, including notification processes in compliance with applicable laws.
Your Rights
Access & Portability
You have the right to access your personal data and request a copy in a portable format. You can view and export your data through your account dashboard.
Correction
You can update or correct your personal information at any time through your account settings or by contacting our support team.
Deletion
You may request deletion of your personal data, subject to our legal obligations to retain certain information for regulatory and business purposes.
Opt-Out
You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your notification preferences.
Data Retention
Active Accounts
We retain your personal information for as long as your account is active and as needed to provide you with our services.
Transaction Records
Transaction data is retained for a minimum of 7 years to comply with financial regulations and to handle potential disputes or audits.
Deleted Accounts
When you delete your account, we will remove your personal information within 30 days, except for data we are legally required to retain.
International Data Transfers
Data Location
Our primary servers are located in secure data centers. When we transfer data internationally, we ensure appropriate safeguards are in place.
Safeguards
We use standard contractual clauses and other legal mechanisms to ensure your data receives adequate protection when transferred across borders.
Questions About Your Privacy?
If you have any questions about this Privacy Policy or our data practices, please don't hesitate to reach out. We're here to help.