Privacy Policy

FlashPay collects the minimum amount of personal information necessary to operate the platform and provide you with a safe, personalised experience. We are committed to the principle of data minimisation — we do not collect information we do not need.

Information you provide directly:

• Full name — used to personalise your account experience and identify you.
• Email address — used for account creation, login, security notifications, and support communications.
• Password — stored in a cryptographically hashed form using industry-standard algorithms (bcrypt/argon2). We never store or transmit your password in plaintext.
• Profile information — any optional information you choose to add to your profile.
• Support messages — content of any messages you send to our support team.
• Uploaded files — any images, documents, or media you upload when using platform features (e.g., package media).

Information collected automatically:

• IP address — used for security monitoring, fraud detection, and abuse prevention.
• Browser type and version — used for compatibility and security monitoring.
• Device type and operating system — used for optimising your experience.
• Pages visited and features used — used for improving platform performance and detecting unusual activity.
• Session identifiers and timestamps — used for session management and security.
• Referral source — how you arrived at the platform (e.g., direct, link, search).

We do not collect sensitive personal data such as government ID numbers, financial account numbers, biometric data, health information, or racial or ethnic origin unless explicitly required and with your clear, informed consent.

We use the information we collect for the following purposes only. We will never use your data for any purpose not described in this policy without first obtaining your explicit consent.

• Account creation and management — to set up, maintain, and secure your account.
• Authentication and access control — to verify your identity when you log in and protect your account from unauthorised access.
• Platform operation — to deliver the tools, features, and services you request.
• Security and fraud prevention — to detect, investigate, and prevent fraudulent activity, abuse, or violations of our Terms of Service.
• Customer support — to respond to your inquiries, resolve disputes, and address any issues you report.
• Platform improvement — to analyse usage patterns and improve the performance, reliability, and features of the platform.
• Legal compliance — to comply with applicable laws, regulations, court orders, or lawful government requests.
• Communications — to send you important service announcements, security alerts, and updates. We do not send unsolicited marketing emails.

FlashPay takes data security extremely seriously. We have implemented a comprehensive set of technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

While we implement robust security measures, no method of data transmission or storage is 100% secure. In the unlikely event of a data breach affecting your personal information, we will notify affected users promptly and take all necessary steps to contain and remediate the breach.

We do not share your personal data with the general public, any data brokers, advertisers, analytics companies, social media platforms, or any other third party not directly involved in operating this platform.

Your personal data may only be shared in the following strictly limited and lawful circumstances:

• Service providers — we may share data with carefully vetted third-party service providers (such as cloud hosting, database, or email delivery services) who process data on our behalf, strictly under confidentiality agreements and only for the purpose of operating FlashPay. These providers are contractually prohibited from using your data for any other purpose.
• Legal requirements — we may disclose your data if required to do so by applicable law, court order, subpoena, or legitimate government request, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of FlashPay, our users, or the public.
• Fraud investigation — we may share limited data with law enforcement or relevant authorities in connection with the investigation of suspected fraud, criminal activity, or serious violations of our Terms of Service.
• Business transfers — in the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

In all cases where we share data, we share only the minimum amount necessary for the specific purpose, and we ensure that appropriate safeguards are in place to protect your privacy.

FlashPay uses strictly necessary cookies and session storage to operate the platform securely. These are essential for authentication, session management, and security purposes and cannot be disabled without affecting your ability to use the platform.

We do not use advertising cookies, third-party tracking pixels, social media trackers, or any cross-site tracking technology. We do not participate in ad networks or retargeting programmes.

Any analytics we collect are processed in aggregated, anonymised form and are used solely to understand platform performance and improve the user experience. We do not use analytics tools that build individual user profiles or track you across the web.

You have significant rights over your personal data. We are committed to upholding these rights and will respond to all valid requests within 30 days. The following rights apply to all FlashPay users:

• Right of Access: You may request a copy of all personal data we hold about you at any time.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request that we delete your account and all associated personal data, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data for certain purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@flashpay.app. We may need to verify your identity before processing your request.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. When your account is deleted, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, compliance, or fraud-prevention purposes.

Activity logs related to security incidents, fraud investigations, or Terms of Service violations may be retained for up to 2 years to protect the platform and cooperate with any ongoing investigations. Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify you.

FlashPay is not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age. If we become aware that we have collected personal data from a person under 18 without verified parental consent, we will take immediate steps to delete that information. If you believe we may have collected data from a minor, please contact us immediately at privacy@flashpay.app.