Privacy Policy

Last updated: April 28, 2026

This Privacy Policy includes important information about your personal data and we encourage you to read it carefully.

Welcome

We provide payment infrastructure for businesses. Individuals and businesses of all sizes use our technology and services to accept payments, share payment links, and manage the payments side of their operations.

This Privacy Policy (“Policy”) describes the Personal Data that we collect, how we use and share it, and how you can reach us with privacy-related inquiries. The Policy also outlines your rights and choices as a data subject, including the right to object to certain uses of your Personal Data.

Depending on the activity, payUnexa acts as a “data controller” and/or a “data processor” (or “service provider”). When we provide our services to a business (a “Business User”) and process the data of that business’s customers, we generally act as a data processor on that business’s instructions.

Defined terms

In this Policy, “payUnexa”, “we”, “our,” or “us” refers to the payUnexa entity responsible for the collection, use, processing, and handling of Personal Data as described here.

“Personal Data” means any information relating to an identified or identifiable individual, including data you provide to us and data we collect about you during your interaction with our Services (such as device information and IP address).

“Services” refers to our payment products, hosted checkout, payment links, APIs, websites, and related applications and online services.

“Financial Partners” are the banks, acquirers, payment processors, and card networks we work with, directly or indirectly, to provide the Services.

Depending on the context, “you” may be:

• End Customers — when you make a payment to a Business User through our checkout or a payment link.
• Representatives — when you act on behalf of a Business User, for example as an account administrator or company owner.
• Visitors — when you interact with our website without being logged in.

“Transaction Data” means data we collect or use in relation to transactions you request. It may include your name, email address, contact number, billing address, payment method information (such as card brand, last four digits, and expiry), the merchant and amount, the date of the transaction, and information about payment status.

1. Personal Data we collect and how we use and share it

1.1 End Customers

When you pay a Business User through payUnexa, we act as a service provider (data processor) for that Business User and process your Personal Data according to our agreement with them.

What we collect:

• Contact details — name, email address, and phone/WhatsApp number.
• Billing details — billing address, city, state/region, postal code, and country.
• Payment metadata — card brand, last four digits, expiry, and the name on the card. We do not receive or store your full card number (PAN) or CVC — these are entered in a secured field and are transmitted directly to our payment processor.
• Transaction Data — amount, currency, status, and reference.
• Technical data — IP address, device, and browser information used for security and fraud prevention.

How we use and share it: to process and confirm your payment; to share Transaction Data with the Business User you are paying and with Financial Partners as needed to complete the transaction, prevent fraud, and handle disputes; to provide support; and to comply with legal obligations. Please review the Business User’s own privacy policy for how they use the data shared with them.

1.2 Representatives

We collect Personal Data from Representatives of Business Users — such as name, work email, login credentials, and, where required for verification and regulatory compliance, identity and business ownership details — to create and manage accounts and to provide the Services.

1.3 Visitors

When you browse our website we receive Personal Data you provide directly (for example, in a contact form) and data collected through cookies and similar technologies, such as usage and device information. See our Cookies section below.

2. More ways we collect, use, and share Personal Data

• Analytics and improvement — to understand how our Services are used, diagnose issues, and improve and develop features.
• Communications — to send you service messages, verification codes, and, where permitted, information about our Services.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent, unauthorized, or harmful activity.
• Service providers — we share Personal Data with vendors who provide cloud infrastructure, analytics, identity verification, and support on our behalf, under contractual confidentiality and security obligations.
• Legal and corporate — we may share Personal Data to comply with law, enforce our terms, protect our rights and users, or in connection with a corporate transaction.

We do not sell your Personal Data.

3. Legal bases for processing

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases: performance of a contract; compliance with a legal obligation (including anti-money-laundering and know-your-customer requirements); our legitimate interests (such as securing the Services and preventing fraud); and your consent, which you may withdraw at any time.

4. Your rights and choices

Depending on your location and subject to applicable law, you may have the right to request access to, correction of, or deletion of your Personal Data; to restrict or object to certain processing; to data portability; and to withdraw consent. You also have the right to opt out of marketing communications at any time.

For Personal Data we process as a data controller, contact us as described below. For data we process on behalf of a Business User (as a data processor), please contact that Business User to exercise your rights; we will refer you to them where we are able to identify them.

5. Security and retention

We maintain organizational, technical, and administrative measures designed to protect Personal Data from unauthorized access, loss, alteration, or misuse, including encryption of sensitive data in transit. No system can be guaranteed to be 100% secure. We retain Personal Data for as long as needed to provide the Services and to meet our legal, tax, accounting, and regulatory obligations, after which we delete or anonymize it.

6. International data transfers

As we and our service providers may operate in multiple countries, your Personal Data may be transferred to and processed in a country other than your own. Where required, we put in place appropriate safeguards for such transfers, such as standard contractual clauses.

7. Cookies

We use cookies and similar technologies to operate our website, remember preferences, measure engagement, and support security. You can control cookies through your browser settings; disabling some cookies may affect how the website functions.

8. Updates and notifications

We may update this Policy from time to time. The “Last updated” date above indicates when it was last materially revised. Changes are effective when we post the revised Policy or as otherwise required by law.

9. Contact us

If you have any questions or complaints about this Policy, please reach us via the Contact Us page. If you are an End Customer, please also refer to the privacy policy of the Business User you transacted with for their practices, choices, and controls.