Privacy Policy

Last Updated: March 29, 2026

Verify Pay ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment verification service, Android application, website, and APIs.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Business name
• Phone number (optional)
• Password (encrypted)

1.2 Payment Notification Data

Our Android application captures payment notifications from supported mobile financial services (bKash, Nagad, Rocket, Upay). The data collected includes:

• Transaction amount
• Sender phone number
• Transaction ID
• Payment method
• Raw notification text

1.3 Device Information

From the Android application, we collect:

• Unique device identifier
• Device model and manufacturer
• Android version
• App version

1.4 Usage Data

We automatically collect:

• API call logs and timestamps
• Transaction counts and success rates
• IP addresses
• Browser/user agent information

2. How We Use Your Information

We use the collected information for:

• Payment Verification: Matching payment notifications to payment requests
• Fraud Detection: Identifying suspicious patterns and preventing abuse
• Service Improvement: Enhancing our matching algorithms and overall service quality
• Account Management: Managing your account, billing, and API access
• Communication: Sending service updates, alerts, and security notifications

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data only:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and prevent fraud
• With service providers who assist in operating our service (e.g., cloud hosting via Supabase)

4. Data Security

We implement industry-standard security measures:

• HTTPS/TLS encryption for all data in transit
• API key authentication and HMAC signatures
• Row-Level Security (RLS) on all database tables
• Encrypted passwords using bcrypt
• Device binding and fingerprinting
• Regular security audits

5. Data Retention

We retain your data as follows:

• Account data: Until you delete your account
• Payment records: 1 year, then archived
• Notification data: 90 days
• Logs: 30 days
• Audit trails: 2 years

6. Data Masking

Sensitive information is masked in logs and displayed data:

• Phone numbers: 017****5678
• API keys: vp_live_****...****
• Transaction IDs are stored securely and not exposed in public-facing data

7. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of non-essential communications

8. Android App Permissions

Our Android application requires the following permissions:

• Notification Access: To capture payment notifications (core functionality)
• Internet: To sync data with our servers
• Foreground Service: To maintain reliable background operation
• Boot Completed: To auto-start after device restart
• Post Notifications: To show sync status notifications (Android 13+)

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@verifypay.eu.cc
Website: https://verifypay.eu.cc