Payment Portal Privacy Policy
Effective version: 24 July 2026
Information collected
We process account identity, mobile number, optional email, login and OTP records, API usage, orders, transaction status, merchant details, webhook settings, referral attribution, commission and payout information, domain verification records, security logs and consent records.
Purpose
Information is used to provide and secure the service, verify payments, prevent fraud, support users, calculate referral commissions, process payouts, comply with law and send communications selected by the user.
Sharing
Necessary information may be processed by payment, banking, SMS, RCS, WhatsApp, hosting, security and compliance providers. API secrets and webhook secrets are not intentionally exposed to other customers.
Marketing choice
WhatsApp and RCS promotional consent is optional and separate from acceptance of these policies. It may be withdrawn from portal settings. Withdrawal does not stop essential transactional or security messages.
Retention and security
Records are retained for service, dispute, fraud, accounting, tax and legal purposes. Reasonable technical controls are used, but users must also keep passwords, API keys and secrets secure.