Privacy Policy

Last updated: 2026-10-26

This policy explains what data Oaisis Pay collects when you use oaisispay.com or the Oaisis Pay app on iOS and Android, why we collect it, who we share it with, and how you control it.

What we collect

• Account data: name, email, phone number, password (stored as a hash, never in plain text), language, and your profile photo if you add one.
• Verification data: ID document type, country and number (encrypted), photos of the document and a selfie holding it, full legal name, date of birth and home address.
• Financial activity: transfers, exchanges, bill payments, cash deposits and withdrawals — amounts, parties and times.
• Contacts (only with your permission): if you let the app access them, it sends their phone numbers so we can show which contacts have an account and you can pay them with a tap. We match the numbers at the moment of the request and then discard them — we do not store them, contact those people, or receive their names. You can stop appearing in other people's contacts from Settings.
• Device and security data: IP address, browser type or device name, sign-in times and notification tokens. We infer your country from your IP address only to choose the interface language — we do not collect your precise location.

Why we collect it

• To provide the service: opening your account, carrying out transactions and showing your statement.
• For security and fraud prevention: verifying your identity, detecting suspicious sign-ins and protecting your balance.
• For legal compliance: know-your-customer, anti-money-laundering and counter-terrorist-financing requirements.
• To contact you: verification messages, notifications about your transactions and replies to your questions.

We do not sell your data, use it for advertising, or track you across other apps or websites.

Who we share it with

• The other party to a transaction: people you pay see your name and account number; merchants see your name and the amount.
• Infrastructure providers: hosting (Contabo, Germany), network protection and delivery (Cloudflare), and the SMS provider that sends verification codes. They process data only on our behalf.
• Authorities: where the law or a court order requires it.

Security

Connections are encrypted (HTTPS); document numbers and verification codes are encrypted in the database; identity documents are stored outside public access, seen only by verification reviewers, and every view is logged.

Retention

We keep your account data while the account is open. When you delete it, we immediately erase your photo, devices, sessions and passkeys. Transaction records and verification documents must by law be kept for a set period after closure (typically five years), and are then deleted.

Your rights

• View and correct your data from Settings in the app or on the website.
• Delete your account at any time — see Account deletion.
• Request a copy of your data, or object to its processing, by contacting us.

Children

The service is for people aged 18 and over. We do not knowingly collect data from anyone younger.

Contact

For any privacy question: [email protected]

We may update this policy and will tell you about any material change in the app before it takes effect.