Privacy Policy

1. Who we are

FlyPay Nexus (“we”) processes personal data to provide payment services to merchants and their customers. Merchants are independent controllers of their customers’ data.

2. Data we collect

Account data (name, email, phone, business details); verification data (identity document images, viewable only by our compliance administrators, and only the last four characters of the document number); transaction data (amounts, methods, references, payer contact details provided at checkout); support messages; and security logs.

3. Website analytics

We record pages visited, timestamp, referring website, browser and operating-system family, device category and approximate location (country, and city only when our hosting provider supplies it). We truncate IP addresses (IPv4 to /24, IPv6 to /48), use a visitor hash that rotates daily, and do not use fingerprinting or GPS. We honour Do-Not-Track and Global Privacy Control signals, and you can opt out below. Analytics records are deleted after the configured retention period (default 90 days).

4. How we use data

To provide and secure the service, verify businesses, process payments with providers, prevent fraud, comply with legal obligations and communicate with you.

5. Sharing

With payment providers and banks needed to process transactions, service providers under contract, and authorities where required by law. We do not sell personal data.

6. Retention

Financial records are retained for the period required by applicable law. Other data is retained only as long as necessary for the purposes above.

7. Your rights

Subject to applicable law (including Tanzania’s Personal Data Protection Act, 2022), you may request access, correction or deletion of your data and object to certain processing. Contact us via the contact form with the topic “Privacy”.