Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register for a RohoPay account, we collect your name, email address, phone number, business name, and business registration details. If you complete identity verification (KYC), we may collect government-issued identification documents and proof of address.

1.2 Payment Data

When you or your customers process payments through RohoPay, we receive transaction details including amount, currency, payment method, timestamp, and transaction status. We do not store raw card numbers (PAN) or CVV. Card data is captured through PCI DSS-compliant payment processors, and we retain only tokenized references needed for reconciliation and dispute resolution.

1.3 Device and Usage Information

We automatically collect information about how you interact with the Service, including IP address, browser type, operating system, device identifiers, pages visited, and actions taken within the dashboard. This information is used for security monitoring, fraud prevention, and improving the Service.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the payment processing Service.
• Process transactions and settle funds to your account.
• Verify your identity and comply with KYC/AML regulations.
• Detect and prevent fraud, unauthorized access, and other harmful activity.
• Send transaction notifications, account updates, and service announcements.
• Analyze usage patterns to improve the Service and developer experience.
• Comply with legal obligations and respond to lawful requests from authorities.

3. Data Sharing

We share information with third parties only as necessary to operate the Service:

• Payment processors — Transaction data is shared with providers (e.g., Flutterwave, Relworx, Iotec) to execute payments. These providers have their own privacy policies governing how they use data.
• Cloud infrastructure — Data is stored on infrastructure providers that maintain industry-standard security certifications.
• Legal requirements — We may disclose information when required by law, regulation, court order, or governmental request.

We do not sell your personal information to third parties. We do not share your data with third parties for their own marketing purposes.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• TLS 1.2+ encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• PCI DSS-aligned card handling — we never store raw card numbers or CVV.
• Regular security audits and penetration testing.
• Role-based access controls and audit logging for sensitive operations.

While we take reasonable precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.

6. Your Rights

Subject to applicable law, you have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of inaccurate or incomplete information.
• Deletion — Request deletion of your personal information, subject to legal retention requirements.
• Objection — Object to processing of your personal information for certain purposes.

To exercise any of these rights, contact us at privacy@rohopay.com. We will respond to your request within 30 days.

7. Cookies

RohoPay uses cookies and similar technologies to maintain session state, authenticate users, remember preferences, and analyze usage. Essential cookies are required for the Service to function. You can manage non-essential cookies through your browser settings. For full details, see our Cookie Policy.