Privacy Policy
Contents
What Information We Collect
We collect different types of personal information, including but not limited to:
Identity Information
- Full name
- Date of birth
- Gender
Contact Information
- Email address
- Phone number
- Residential or business address
Financial Information
- Bank account details (account name, number, bank name)
- Transaction history (payments, transfers, wallet balances)
- Payment method information
Usage Information
- Device information (device type, operating system, version)
- IP address
- Geolocation (if allowed or required)
- Log information (dates & times of access, errors, crash reports)
Verification / Compliance Data
- Government-issued ID (passport, driver's license, etc.)
- Proof of address (utilities bill, bank statement)
- Other data required for KYC / AML / fraud prevention
How We Use Your Information
We use your data for the following purposes:
- To provide, maintain, and improve our services
- To process transactions, swaps between currencies, wallet funding, and transfers
- To comply with legal obligations (KYC, AML, tax laws)
- To verify identity and prevent fraud
- To communicate with you (customer service, technical notices, updates)
- To detect, investigate, and prevent fraudulent or unauthorized activity
Legal Bases for Processing
Where required by law (e.g. GDPR), we rely on the following legal bases:
Contract Performance
To provide the financial services you request
Legal Obligation
Complying with KYC/AML regulations
Legitimate Interests
Fraud prevention and improving our service
Consent
For marketing or non-essential communications
Data Retention
We retain your personal data:
- For as long as necessary to fulfill the purposes in this policy
- To comply with applicable legal, tax, or accounting requirements
- To resolve disputes, prevent fraud, and enforce agreements
Security
We use reasonable administrative, technical, and physical safeguards to protect your data:
Encryption
In transit & at rest
Access Controls
Authentication & role-based access
Security Audits
Regular internal reviews
Your Rights
Depending on your jurisdiction, you may have the right to:
Access
Request a copy of your personal data
Correct
Fix inaccurate or incomplete data
Delete
Request deletion of your data
Restrict
Limit how we process your data
Portability
Receive your data in a portable format
Withdraw Consent
Where consent is the legal basis
To exercise these rights, contact us at admin@tuyaupay.com.
International Transfers
Your data may be stored or processed in jurisdictions outside your country of residence (e.g., servers in Canada, US, Nigeria). We will ensure that adequate safeguards are in place — such as binding corporate rules or standard contractual clauses — to protect your data whenever it is transferred internationally.
Children's Data
We do not knowingly collect personal data from children under 18. If we learn we have collected data from a minor, we will delete it as soon as possible. If you believe a child has provided us with personal information, please contact us immediately.
Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Post the new version here with a new effective date
- Notify you via email or in-app notification
Contact Us
If you have questions or concerns about this policy or how your data is handled, reach out to us:
TuyauPay