Title: NexPay Privacy Policy

Last Updated: [Date, e.g., November 5, 2025]

1. Our Commitment to Privacy NexPay ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect the personal information of our Merchants ("you") and your Customers when you use our services.

2. Information We Collect

We collect information in the following ways:

  • Merchant Information (Personal Data): When you register for a Merchant account, we collect information necessary for KYC (Know Your Customer) and anti-money laundering (AML) compliance. This includes your name, email, phone number, business name, trade license, and bank account details.

  • Customer Transaction Information: When your customers make a payment, we collect transaction data, which may include their name, email, phone number, and payment method details (encrypted and tokenized). We process this data on your behalf.

  • Technical & Usage Data: We automatically collect information when you access our website or Service, including your IP address, browser type, device information, and activity logs. (See our Cookie Policy for details).

3. How We Use Your Information

We use your information for the following purposes:

  • To Provide and Manage the Service: To process payments, settle funds, authenticate your account, and provide customer support.

  • For Security and Fraud Prevention: To protect our platform, mitigate risks, prevent fraud, and ensure compliance with financial regulations.

  • To Comply with Legal Obligations: To meet our legal, regulatory, and reporting requirements (e.g., to Bangladesh Bank).

  • To Communicate with You: To send you important service updates, security alerts, and administrative messages.

4. How We Share Your Information

We do not sell your personal information. We only share it in the following limited circumstances:

  • With Financial Partners: To process transactions, we must share data with banks, payment networks (like Visa/Mastercard), and mobile financial services (like bKash/Nagad).

  • For Legal Compliance: If required by law, subpoena, or a formal request from a government or regulatory authority.

  • With Service Providers: With trusted vendors who perform services on our behalf (e.g., cloud hosting, security services), under strict confidentiality agreements.

5. Data Security and Integrity We implement advanced technical and organizational security measures to protect your data. This includes end-to-end encryption, secure data storage, access controls, and regular security audits. All payment data is handled in a manner compliant with the highest industry standards.

6. Data Retention We retain your personal information only for as long as necessary to provide the Service, and as required to comply with our legal and financial obligations (e.g., for audit and reporting purposes).

7. Your Rights and Choices You have the right to access, review, and update your Merchant account information through your dashboard. If you wish to close your account or request data deletion, please contact us, subject to our legal retention requirements.

8. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website or via email.

9. Contact Us If you have any questions about this Privacy Policy, please contact us at: [Your Contact Email, e.g., legal@nexpay.com]