Privacy Policy

1. Who processes your data

For account holders (merchants, their team members and sales partners) PAYWISE decides how their account data is used. For the data of a merchant's customers that merchants send us with payments, PAYWISE processes it on the merchant's behalf to run the payment.

2. What we collect

Account data: name, email address, password (stored only as a one-way hash), language, role, and for merchants the business details, logo, websites, bank account or wallet for withdrawals.

Payment data: amounts, currency, status, times, the merchant's order reference, the customer id and customer name the merchant sends, and the payment partner's reference.

Security and usage data: IP address, browser and device, sign-in times, signed-in sessions, trusted devices, email codes (stored as hashes), audit log entries, API request logs and webhook deliveries.

Support data: messages and screenshots you send in support tickets. Notification settings, including push subscriptions for devices you turn notifications on for.

3. Why we use it

To run the service you asked for: accepting and confirming payments, paying out, sending notifications and answering support.

To keep accounts and money safe: two-step sign-in, security notices, fraud and abuse checks, audit logs.

To meet legal duties such as record keeping and requests from authorities, and to improve PAYWISE with aggregated, non-identifying statistics.

4. Who we share it with

Payment partners that process the payments and payouts (a QRIS customer label is sent only when it is not an email address), our email and push notification services, our hosting and network providers, and authorities when the law requires it.

We never sell personal data. Service providers may only use it to provide their service to PAYWISE.

5. How long we keep it

Account and payment records are kept while the account is open and afterwards for as long as the law requires for financial records. Provider request logs are deleted after 30 days. Support tickets are kept with the account.

Encrypted database backups are kept for a limited time to recover from failures.

6. Security

Data travels over HTTPS; passwords, email codes and API keys are stored as hashes; backups are encrypted; access inside PAYWISE is limited by role and recorded in an audit log. Payment pages and screenshots are only served to the people allowed to see them.

7. Cookies and the app

PAYWISE uses only necessary cookies: your signed-in session, the security token that protects forms, your language and, if you choose it, a trusted-device cookie. We do not use advertising cookies.

The installable app stores static files (styles, icons) on your device to open faster; it never stores your payment or account data offline.

8. Your rights

You can see and correct your account data in the dashboard, and ask through Support for a copy, a correction, deletion (unless we must keep it by law), or to restrict or object to processing, and withdraw consent where processing is based on it.

Customers of a merchant should contact the merchant first; we help the merchant answer. You can also complain to the competent personal data protection authority.

9. Changes

We will announce material changes to this policy in the dashboard before they apply.