Privacy Policy

Effective Date: February 18, 2026

At PayID ("we," "us," or "our"), we respect your privacy and are committed to protecting it through our compliance with this policy. This Privacy Policy describes how we collect, use, and share your personal information when you use our platform, APIs, and identity verification services (collectively, the "Services").

1. Information We Collect

We collect several types of information from and about users of our Services, including:

a. Personal Information You Provide

• Account Data: When you register, we collect your name, email address, password (hashed), and phone number.
• Profile Information: Date of birth, gender, address, and profile picture.
• Identity Verification Data (KYC): To verify your identity, we may collect government-issued IDs (e.g., Passport, Driver's License, National ID), biometric data (e.g., facial scan), and other supporting documents.

b. Information Collected Automatically

• Usage Details: Traffic data, location data, logs, and other communication data.
• Device Information: IP address, operating system, and browser type.
• Cookies: We use cookies and similar technologies to maintain your session and improve your experience.

c. Information from Third Parties

• KYC Providers: We receive verification results (verified/failed, risk scores) from our partners like QoreID (for Nigerian users) and Plaid (for international users).
• Connected Apps: When you sign in with PayID on third-party sites, we may receive information about your interaction with those sites.

2. How We Use Your Information

We use your information to:

• Provide the Services: Create and manage your account, verify your identity, and facilitate secure sign-ins.
• Improve Our Platform: Analyze usage trends to enhance user experience and functionality.
• Communications: Send you administrative notifications, security alerts, and support messages.
• Security & Fraud Prevention: Detect and prevent fraudulent activities, abuse, and security incidents.
• Compliance: Comply with legal obligations (e.g., anti-money laundering regulations).

3. Disclosure of Your Information

We may disclose aggregated information about our users without restriction. We may disclose personal information that we collect or you provide:

• To Our Subsidiaries and Affiliates.
• To Contractors and Service Providers: Including our KYC verification partners (QoreID, Plaid) solely for the purpose of verifying your identity.
• To Third-Party Applications: Only when you explicitly authorize (consent) to share your profile data (e.g., name, email, verified status) with a specific application via OAuth 2.0/OIDC.
• For Legal Reasons: To comply with any court order, law, or legal process, including to respond to government or regulatory requests.

4. Data Security

We implement measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

• Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access Controls: Restricted access based on roles using the principle of least privilege.
• Token Management: Secure token storage with regular rotation.

However, the transmission of information via the internet is not completely secure. We cannot guarantee the absolute security of your personal information transmitted to our Services.

5. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data.
• Rectify inaccurate personal data.
• Request deletion of your personal data ("Right to be Forgotten").
• Restrict or object to the processing of your data.
• Withdraw consent at any time.

To exercise these rights, please contact us at privacy@payid.cloud.

7. International Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We ensure appropriate safeguards are in place for such transfers.

8. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. The date the privacy policy was last revised is identified at the top of the page.

9. Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

Email: privacy@payid.cloud