PayNow® Payment Service Ltd. ("PayNow", "we", "our", or "us") takes the protection of your personal information very seriously. This policy explains how we collect, use, store, share, and safeguard your information when you visit our website or use our payment services.
1. Information We Collect
When you use our services, we collect the following:
- Account information you actively provide, including your name, email address, phone number, company name, and role.
- Login credentials and device information, including IP address, device model, operating system, browser type, and login timestamps.
- Data necessary for the services, including transaction records, operation logs, and risk-control events.
- Where you access PayNow via a third-party AI assistant or MCP connector, the minimum data necessary to execute the operation you requested through that platform.
2. How We Use Your Information
We use your information solely for the following purposes:
- Identity verification and access control.
- Transaction processing, risk control, fraud and anti-money-laundering (AML) screening.
- Compliance auditing, tax reporting, and regulatory submissions.
- Service improvement, troubleshooting, and feature optimization.
- Security incident response and notification.
We will not use your personal information for any other purpose without your express consent or where required by law.
3. Cookies and Similar Technologies
To improve service quality and security, we use cookies and similar technologies on your device. You can manage or clear cookies through your browser settings, but doing so may cause some features to be unavailable. We do not store your password or payment credentials in cookies.
4. Sharing and Cross-Border Data Transfers
PayNow operates across India, Indonesia, Africa, Southeast Asia, and other regions, and your information may be transferred to and stored on servers we operate, or on cloud services authorized by our partner financial institutions, in those regions. We commit to:
- Never sell your personal information to any third party.
- Disclose information only to partner financial institutions, card networks, KYC service providers, or regulators and judicial authorities, and only to the extent necessary to provide the services.
- Never provide any service or transfer any data to any party on applicable sanctions lists.
5. Data Security
We use industry-standard encryption and access-control technologies, including TLS 1.2+ in transit, AES-256 at rest, role-based access control (RBAC), two-factor authentication, and full operational auditing. Access by our personnel follows the principle of least privilege.
6. Your Rights
You have the right to access, correct, or delete your personal information, and to withdraw any consent you previously granted. You may submit requests through your account settings or via the contact channels listed at the end of this policy. We will respond within thirty (30) calendar days of receiving your request.
7. Retention
We retain your personal information for the shortest period necessary to fulfill the purposes described in this policy. Transaction-related records are retained for at least five (5) years as required by applicable law. After the retention period, we delete or irreversibly anonymize the data.
8. Minors
Our services are not intended for individuals under the age of eighteen (18). If we discover that a minor has registered or used our services, we will close the relevant account and delete the associated information.
9. Changes to This Policy
We may revise this policy to reflect business, regulatory, or service changes. Material changes will be communicated through in-platform notice, email, or a prominent prompt at sign-in. Continued use of our services after such changes constitutes acceptance of the revised policy.
10. Governing Law and Contact
This policy is governed by the laws of Singapore. If you have any questions, comments, or complaints about this policy or the processing of your personal information, please contact our Data Protection Officer (DPO) at legal@paynow.llc. We will respond within thirty (30) calendar days.