Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information collected automatically when you use our services, and information from third-party sources where permitted by law.

Information you provide:

• Account registration details including name, email address, phone number, and business information
• Payment and financial information such as bank account details, tax identification numbers, and billing addresses
• Identity verification documents required for KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance
• Communications you send us, including support requests, enquiries, and feedback
• Transaction data including amounts, timestamps, merchant details, and payment methods used

Information collected automatically:

• Device information including IP address, browser type, operating system, and device identifiers
• Log data such as pages visited, time spent, referring URLs, and clickstream data
• Location data (approximate, based on IP address) unless you grant permission for precise location
• Cookies and similar tracking technologies as described in our Cookies section below

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our payment processing services
• To process transactions and send related information such as confirmations and receipts
• To verify your identity and comply with legal and regulatory obligations
• To detect, prevent, and investigate fraud, money laundering, and other illegal activities
• To send transactional communications, service updates, and security alerts
• To respond to your comments, questions, and requests and provide customer support
• To send marketing communications where you have consented or where we have a legitimate interest
• To improve and develop our products, services, and platform features
• To monitor and analyse usage trends and preferences to enhance user experience
• To comply with applicable laws, regulations, and legal processes

3. Data Security — PCI DSS Compliance

KaChing Payments maintains PCI DSS (Payment Card Industry Data Security Standard) compliance. We implement comprehensive technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure, or destruction.

Our security measures include:

• End-to-end encryption of all payment data in transit using TLS 1.2 or higher
• AES-256 encryption for data at rest
• Tokenisation of sensitive payment credentials — we never store raw card numbers
• Regular security audits, penetration testing, and vulnerability assessments
• Multi-factor authentication for all platform access
• Strict access controls — data accessed on a need-to-know basis only
• 24/7 fraud monitoring and anomaly detection systems
• Staff training on data protection and security practices

While we implement robust security measures, no system is completely impenetrable. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.

4. Third-Party Services

We work with carefully selected third-party service providers who assist us in delivering our services. These include:

• Payment networks and banking partners for transaction processing
• Identity verification and KYC providers
• Cloud hosting and infrastructure providers
• Analytics providers to help us understand how our platform is used
• Customer support and communication tools
• Fraud prevention and risk management services

All third-party providers are contractually required to handle your data in accordance with this Privacy Policy and applicable data protection laws. We do not sell your personal information to third parties for their marketing purposes.

5. Cookies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files placed on your device when you visit our website.

We use the following types of cookies:

• Essential cookies: Necessary for the platform to function correctly. These cannot be disabled.
• Performance cookies: Help us understand how visitors interact with our website by collecting anonymous usage data.
• Functional cookies: Remember your preferences and settings to personalise your experience.
• Marketing cookies: Used to track visitors across websites to display relevant advertising (only with your consent).

You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our platform. For more information, please refer to your browser's help documentation.

6. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Transaction records are typically retained for a minimum of seven (7) years in accordance with financial services regulations. Account data is retained for the duration of your relationship with us, plus any applicable statutory retention period.

When data is no longer required, we securely delete or anonymise it in accordance with our data retention schedule.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal information we hold about you
• Right to rectification: Request correction of inaccurate or incomplete information
• Right to erasure: Request deletion of your personal data where we have no compelling reason to continue processing it
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

Note that certain rights may be limited where we have overriding legal obligations — for example, we may be required to retain transaction records for regulatory compliance even if you request deletion.

To exercise any of these rights, please contact us using the details in the section below. We will respond within 30 days of receiving your request.

8. International Data Transfers

KaChing Payments operates in South Africa and the United States. Your information may be transferred to and processed in countries other than your own. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses and adherence to applicable data transfer frameworks.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. We encourage you to review this policy periodically. Your continued use of our services after the effective date of any change constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact our Privacy team:

• Email: info@kachingpayments.com
• Phone (South Africa): 010-900-4295
• Phone (USA): +1 512-729-6333

We take all privacy enquiries seriously and will respond promptly to your request.