Privacy Policy

1 Information We Collect

To provide seamless payment aggregation, automated SMS verification, and settlement payouts, we collect the following categories of information:

• Merchant Account Data: Name, business name, corporate email address, encrypted password hash, business URL, and company registration details.
• Settlement Data: Bank account numbers, routing numbers, and MFS mobile wallet accounts used exclusively for remitting merchant withdrawals.
• Transaction Data: Order IDs, gross amounts, currency, payer phone numbers or wallet addresses, gateway transaction references (TrxID/TX-hash), and timestamps.
• Technical Telemetry: IP addresses, browser user-agent tokens, webhook delivery logs, and API request metadata.

2 How We Use Your Information

We process collected data strictly for operational purposes:

• Verifying incoming MFS SMS notifications and matching TrxIDs to open checkout orders.
• Executing ledger bookkeeping, fee deductions, and balance credits to merchant accounts.
• Processing payout remittances to merchant bank accounts or mobile wallets upon withdrawal requests.
• Preventing fraud, mitigating transaction disputes, and complying with anti-money laundering (AML) laws.

3 Data Protection & Security Architecture

All data transmission between merchants, end-users, and our servers is encrypted using Transport Layer Security (TLS 1.3). API secret keys and sensitive credentials are encrypted at rest using industry-standard AES-256 and bcrypt algorithms.

4 Third-Party Sharing

We do not sell, rent, or trade merchant or customer personal data to third parties for marketing purposes. Data is only shared with authorized financial institutions (e.g. Bangladesh Bank, partner clearing banks) or as required by court subpoenas or lawful law enforcement requests.