Privacy Policy

1. Data We Collect

For the purpose of providing and optimizing our services, we may collect the following categories of data:

• Identification and contact data: name, email address, phone number, business details (for merchants).
• Financial transaction data: amounts, date and time of transaction, identifier of the scanned QR code. We do not store complete credit card or bank account details.
• Technical data: IP address, device and browser type, application usage data (scans, errors).

2. Purpose of Data Processing

We process your data for:

• Processing and confirming instant payments.
• Administering digital loyalty programs.
• Improving and securing the technical platform.
• Service-related communication (confirmations, security updates).
• Compliance with legal obligations in the financial sector.

3. Cookies and Similar Technologies

We use strictly necessary cookies for the secure operation of payment sessions and for analyzing aggregated system performance (without individual identification). Consent for non-essential cookies is managed via the banner on your first visit.

4. Sharing with Third Parties

Your data may be shared only in the following situations:

• With authorized payment processors, solely for completing the transaction.
• With regulatory authorities, upon mandatory legal request.
• With our technical service providers (hosting, security), under strict confidentiality agreements.

We do not sell or rent user data to third parties for marketing.

5. Your Rights

In accordance with legislation (GDPR), you have the right to:

• Access and portability: request a copy of your data.
• Rectification and erasure: correct or request the deletion of your data, within legal limits.
• Restriction and objection: object to certain types of processing.
• Withdrawal of consent: for processing based on consent, which can be withdrawn at any time.

To exercise these rights or for privacy-related questions, contact the data protection officer at the address below.

6. Data Security

We implement technical and organizational security measures (encryption, access control, auditing) to protect data against unauthorized access, disclosure, or destruction.