Privacy policy

1. Who we are and information we collect

DSD PAY operates a peer-to-peer digital wallet and merchant payment technology service. DSD PAY is not a licensed deposit-taking bank. Where funds are held, transmitted, or converted, this may occur through regulated banking or mobile-money partners, whose own privacy and compliance terms may also apply.

We collect identity and contact details such as full name, date of birth, national ID or passport information, verification photographs, email, phone number, address, business information, login identifiers, verification records, and support messages. We also collect transaction, wallet, payment-method, settlement, dispute, device, IP address, browser, audit, security-event, app-version, crash, and diagnostic data needed to operate and secure the Service.

We may receive information from you, authorised business administrators, Google OAuth, banks and mobile-money operators including MTN, Airtel, and Orange Money, identity and compliance providers, fraud-prevention partners, other users, devices, and public sources where permitted by law.

2. How we use information

We use information to create and authenticate accounts, process and secure payments, deliver notifications, provide customer support, verify businesses, prevent fraud and abuse, reconcile records, manage permissions, operate APIs, monitor reliability, investigate incidents, comply with law, and improve our products.

We may use aggregated or de-identified information for analytics, capacity planning, risk modelling, and service improvement. We do not sell personal information.

3. Legal and business purposes

Depending on the jurisdiction, processing is based on contract performance, legal and regulatory obligations, legitimate interests in security and service operation, consent where required, and protection of users or the public. Where we rely on consent, you may withdraw it without affecting prior lawful processing.

4. Sharing and disclosures

We share information with payment and mobile-money providers, banking and settlement partners, cloud hosting, messaging and notification vendors, identity and compliance providers, fraud-prevention services, professional advisers, auditors, and authorities when legally required. Vendors must process information under appropriate safeguards.

A merchant may see information necessary to identify and reconcile a payment made to that merchant. We do not disclose passwords, secret API keys, wallet balances, or unrelated private records through public merchant pages.

5. International transfers and security

Service providers may process information in countries other than where you live. We use contractual, technical, and organisational safeguards appropriate to the transfer and applicable law.

We use access controls, encryption in transit, credential hashing, audit logs, device security, monitoring, backups, and incident response. No internet service is completely secure, so protect your credentials and report suspicious activity immediately.

6. Retention

We retain account, transaction, identity, audit, tax, dispute, and security records for as long as needed to provide the Service and meet legal, regulatory, fraud-prevention, accounting, and dispute-resolution obligations. KYC records are retained for the period required by applicable financial-services and anti-money-laundering law; transaction and ledger records for the statutory accounting and tax period; and security logs for as long as needed to investigate incidents and demonstrate compliance. Where information is no longer needed, we delete or irreversibly anonymise it.

7. Your rights, account deletion, and complaints

Subject to local law, you may request access, correction, deletion, restriction, portability, or objection to certain processing. You may also update profile information in your dashboard and manage marketing preferences. We may need to verify your identity and may retain information where law requires it.

You may request account deletion from your account settings or by contacting DSD PAY through the official support channel with the subject “Account deletion request”. We will verify the requester, close access where appropriate, and delete or anonymise information that is not required for pending transactions, fraud prevention, tax, accounting, dispute resolution, legal holds, KYC/AML, or regulatory retention. Deletion does not reverse completed payments or remove records that we must lawfully retain.

Never send passwords, PINs, one-time codes, full card or bank account numbers, or API secret keys by email or chat. For privacy requests or complaints, contact DSD PAY through Settings → Support → Privacy. You may also contact your applicable data-protection authority where local law gives you that right.

8. Cookies, children, and third-party services

Our website and app use cookies and similar technologies for authentication, security, preference storage, and analytics. You may manage non-essential cookies through your browser settings, but blocking essential storage may sign you out or disable payment and dashboard features.

DSD PAY is intended for adults legally capable of entering financial contracts. We do not knowingly allow individuals below the applicable legal age to independently open or operate a wallet. If we learn that we collected information from someone below the applicable age without appropriate authorisation, we will close the account and delete the information except where retention is required by law.

Links and integrations may lead to banks, mobile-money operators, identity-verification providers, and other third-party services. Their privacy notices govern information provided directly to them; this Policy applies to information DSD PAY collects and processes.

9. Changes, contact, and important notice

We may update this Policy when our services, laws, or practices change. We will publish the updated version with a new effective date and provide additional notice or renewed consent where required by law.

For questions, requests, or complaints, use Settings → Support → Privacy in the DSD PAY app or dashboard. Include enough information to identify your account, but never include secrets. This Policy is general product information and is not legal, tax, financial, or regulatory advice. DSD PAY should obtain independent counsel for each jurisdiction in which it operates, including Uganda and Guinea.