This Privacy Policy explains how Qpay ("Qpay", "we", "us") collects, uses and protects personal information when you use our website, merchant panel, hosted checkout and APIs (the "Services").
Information we collect
- Merchant account data: name, business name, email, mobile number, website, login and security settings.
- Business verification (KYC) documents you upload, such as trade license, NID and TIN.
- Payment data: amount, invoice number, payer mobile number, wallet transaction ID (TrxID), payment status and timestamps.
- Customer data submitted by merchants or customers at checkout: name, email and mobile number.
- Technical data: IP address, browser type, device information and logs needed to operate and secure the Services.
- Communications: messages you send to us through the contact form, email or dispute tools.
How we use information
- To provide the Services: create and verify payments, settle funds, send receipts and notifications.
- To verify identity, prevent fraud and comply with legal obligations (for example, anti-money-laundering rules).
- To send service messages by email and SMS, such as verification codes, payment confirmations and security alerts.
- To provide support, resolve disputes and improve the Services.
We do not sell personal information.
Sharing
We share information only when needed to run the Services:
- With payment providers such as bKash and other mobile financial services to process payments.
- With the merchant you paid, so they can fulfil your order.
- With service providers (hosting, email and SMS delivery) under confidentiality obligations.
- With authorities when required by law or to protect our rights and users.
Security
Secrets such as API keys and payment credentials are stored encrypted. Access to personal data is limited to staff who need it. Connections are protected with HTTPS. No system is completely secure, so please keep your password and API secret private and enable two-step verification.
Retention
We keep payment and account records as long as needed to provide the Services and to meet legal and accounting requirements. Logs and SMS contents are deleted or anonymised automatically after a set period.
Your choices
- You can update your profile information in the merchant panel.
- You can turn off optional SMS notifications in your profile.
- You can ask us for a copy of your data or to delete your account, subject to legal record-keeping duties, by writing to [email protected].
Cookies
We use essential cookies to keep you signed in, protect forms (CSRF) and remember your language. We do not use advertising cookies.
Children
The Services are intended for businesses and adults. We do not knowingly collect information from children.
Changes
We may update this policy. The "last updated" date at the top shows the latest version. Significant changes will be announced in the merchant panel or by email.
Contact
Qpay
Bangladesh
Email: [email protected]
Phone: —