1. Introduction
PayNexus is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our payment processing services.
2. Information We Collect
We collect various types of information to provide our services effectively:
Personal Information
- Name, email address, and phone number
- Business registration details
- Bank account information for payouts
- Government-issued identification documents
Transaction Information
- Payment amounts and dates
- Customer phone numbers (for M-Pesa payments)
- Transaction descriptions and references
- Payment status and confirmation details
Technical Information
- IP address and device information
- Browser type and operating system
- Access times and pages viewed
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information for the following purposes:
- To provide and maintain our payment processing services
- To process transactions and facilitate payments
- To verify your identity and prevent fraud
- To communicate with you about your account
- To provide customer support and technical assistance
- To improve our services and develop new features
- To comply with legal and regulatory requirements
- To send important notices and service updates
4. Information Sharing
We may share your information in the following circumstances:
Payment Processors
We share necessary transaction information with M-Pesa and other payment processors to complete payment transactions.
Service Providers
We work with third-party service providers who assist us in operating our business, such as cloud hosting providers and analytics services.
Legal Requirements
We may disclose your information when required by law, court order, or government regulation, or to protect our rights and safety.
5. Data Security
We implement comprehensive security measures to protect your information:
- SSL/TLS encryption for all data transmissions
- Bank-level encryption for stored data
- Regular security audits and penetration testing
- Access controls and authentication systems
- Employee training on data protection
- Compliance with PCI DSS standards
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. Transaction records are typically retained for 7 years to meet regulatory requirements.
7. Your Rights
You have the following rights regarding your personal information:
- Access to your personal information
- Correction of inaccurate information
- Deletion of your account and personal data
- Restriction of processing in certain circumstances
- Data portability to transfer your information
- Objection to processing for legitimate interests
8. Cookies and Tracking
We use cookies and similar technologies to enhance your experience and analyze website usage. You can control cookie settings through your browser preferences.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be communicated through our website or via email. Continued use of our services constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: privacy@paynexus.co.ke
Phone: +254 798 808 796
Address: 123 Business Ave, Suite 100, Nairobi, Kenya
13. Regulatory Compliance
This Privacy Policy complies with applicable data protection laws, including the Kenyan Data Protection Act, 2019, and other relevant regulations.
Last Updated: January 25, 2026