Privacy Notice

At FimiPay, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Notice explains how FimiPay collects, uses, stores, shares, and protects information when you use our website, applications, APIs, payment services, merchant services, identity verification services, and related products and services (collectively, the "Services").

By accessing or using FimiPay Services, you acknowledge that you have read and understood this Privacy Notice.

1. Who We Are

FimiPay is a financial technology platform that provides payment processing, merchant services, identity verification, payment infrastructure, APIs, and related financial technology solutions.

This Privacy Notice applies to all users, merchants, customers, developers, partners, and visitors who interact with FimiPay Services.

1. Information We Collect

FimiPay may collect information directly from you, automatically through your use of the Services, and from trusted third parties.

Personal Information

We may collect:

• Full name
• Date of birth
• Nationality
• Residential address
• Phone number
• Email address
• Occupation
• Tax identification information
• Business registration information
• Company ownership information

Identity Verification Information

To comply with Know Your Customer (KYC), Anti-Money Laundering (AML), fraud prevention, and regulatory requirements, we may collect:

• National ID (NIDA)
• Passport
• Driver's License
• Residence Permit
• Business Registration Certificates
• Tax Certificates
• Selfie photographs
• Facial verification images
• Supporting verification documents

Financial Information

Depending on the Services used, we may collect:

• Bank account details
• Mobile money account information
• Transaction history
• Payment information
• Settlement information
• Refund records
• Chargeback records

Technical Information

When you use our Services, we may automatically collect:

• IP address
• Device information
• Browser information
• Operating system information
• Device identifiers
• Application logs
• Session information
• Network information

Usage Information

We may collect:

• Login history
• Account activity
• Transaction activity
• API activity
• Support interactions
• Website usage information

1. Selfie and Identity Verification Data

To protect users and comply with regulatory requirements, FimiPay may collect selfies and identity documents during verification processes.

We may use selfie and identity verification data to:

• Verify your identity.
• Confirm ownership of identification documents.
• Prevent identity theft.
• Detect fraudulent activity.
• Meet regulatory obligations.
• Improve account security.

Selfies may be compared against photographs contained in government-issued identification documents using manual and automated verification methods.

1. How We Use Your Information

FimiPay may use your information for the following purposes:

Service Delivery

To:

• Create and manage accounts.
• Process payments.
• Facilitate settlements.
• Provide customer support.
• Deliver requested Services.

Identity Verification

To:

• Verify your identity.
• Authenticate account ownership.
• Conduct KYC procedures.
• Prevent unauthorized access.

Fraud Prevention and Security

To:

• Detect suspicious activity.
• Prevent fraud.
• Monitor transaction risks.
• Investigate security incidents.
• Protect users and the platform.

Regulatory Compliance

To:

• Comply with AML regulations.
• Meet KYC obligations.
• Respond to lawful requests.
• Fulfill reporting requirements.
• Conduct compliance monitoring.

Communication

To:

• Send account notifications.
• Deliver transaction updates.
• Provide security alerts.
• Respond to inquiries.
• Communicate service updates.

Platform Improvement

To:

• Improve user experience.
• Analyze service performance.
• Develop new products and features.
• Conduct internal research and analytics.

1. Legal Basis for Processing

FimiPay processes information where necessary to:

• Perform contractual obligations.
• Comply with legal and regulatory requirements.
• Protect legitimate business interests.
• Prevent fraud and abuse.
• Obtain user consent where required.

1. How We Share Information

FimiPay may share information with:

Financial Institutions

Including:

• Banks
• Mobile money operators
• Payment processors
• Settlement partners

Where necessary to process transactions.

Identity Verification Providers

We may share verification information with trusted third-party providers for:

• Identity authentication.
• Document verification.
• Fraud prevention.
• Compliance screening.

Service Providers

We may engage service providers that assist with:

• Cloud hosting
• Technical infrastructure
• Customer support
• Security monitoring
• Analytics services

Regulatory and Legal Authorities

We may disclose information where required by:

• Law
• Court order
• Regulatory request
• Government authority
• Law enforcement investigation

Corporate Transactions

Information may be transferred in connection with:

• Mergers
• Acquisitions
• Corporate restructuring
• Asset sales

1. Data Retention

FimiPay retains information only for as long as necessary to:

• Provide Services.
• Comply with legal obligations.
• Meet regulatory requirements.
• Resolve disputes.
• Prevent fraud.
• Enforce agreements.

Verification records, transaction records, and compliance documentation may be retained for extended periods where required by applicable laws.

1. Data Security

FimiPay implements reasonable technical, administrative, and organizational safeguards to protect information against:

• Unauthorized access.
• Unauthorized disclosure.
• Alteration.
• Destruction.
• Loss.
• Misuse.

Security measures may include:

• Encryption
• Access controls
• Audit logging
• Network security protections
• Identity verification controls

While we strive to protect information, no method of transmission or storage is completely secure.

1. Your Rights

Subject to applicable law, you may have the right to:

• Access your information.
• Correct inaccurate information.
• Request deletion of information.
• Restrict certain processing activities.
• Object to certain uses of information.
• Request a copy of your information.

Some requests may be limited where FimiPay must retain information for legal, regulatory, security, or fraud prevention purposes.

1. Cookies and Similar Technologies

FimiPay may use cookies and similar technologies to:

• Maintain sessions.
• Improve functionality.
• Analyze website usage.
• Enhance security.
• Remember preferences.

Users may manage cookie preferences through browser settings.

1. International Data Transfers

Where necessary, FimiPay may process or transfer information across jurisdictions in accordance with applicable laws and appropriate safeguards.

1. Children's Privacy

FimiPay Services are not intended for individuals under the age of 18.

We do not knowingly collect personal information from children.

If we become aware that information has been collected from a child, we will take appropriate steps to remove it.

Google Calendar and Google Meet (Consultation products)

When a merchant uses FimiPay's consultation product and connects Google Calendar, FimiPay requests only the narrower OAuth scope https://www.googleapis.com/auth/calendar.events.

We use this single, targeted scope to:

• Read the consultant's availability so clients can book a free slot without double-booking.
• Create a calendar event on the consultant's Google Calendar when a client books a specific session.
• Use the Calendar conferenceData feature within the same scope to generate a unique Google Meet link for that session automatically.

This means both the consultant and the client get a complete appointment record with direct meeting access — without requesting broader Google Calendar permissions.

Google Calendar availability and booking-related event data are used only to provide automatic scheduling and meeting links for consultations.

We do not sell personal data. We do not sell, rent, or share Google user data with third parties for advertising, marketing lists, or unrelated commercial purposes. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Merchants can disconnect Google Calendar at any time from their FimiPay dashboard. Disconnecting stops further calendar access for new bookings.

1. Updates to this Privacy Notice

FimiPay may update this Privacy Notice periodically.

Updated versions become effective upon publication on the FimiPay website or platform.

Continued use of the Services after updates constitutes acceptance of the revised Privacy Notice.

1. Contact Information

If you have questions about this Privacy Notice or how your information is handled, please contact:

FimiPay

Website: https://fimipay.com

Email: [email protected]

How FimiPay Collects and Uses Data

Information We Collect

FimiPay collects information when you:

• Create an account.
• Submit identity verification documents.
• Upload a selfie.
• Process payments.
• Use our APIs.
• Contact support.
• Visit our website.
• Access our applications.

The information collected may include:

• Personal details.
• Contact information.
• Identity documents.
• Selfie images.
• Business information.
• Transaction records.
• Device information.
• Usage information.

How We Use Data

We use collected information to:

• Verify identity.
• Prevent fraud.
• Process payments.
• Provide Services.
• Maintain security.
• Comply with legal obligations.
• Improve platform performance.
• Communicate with users.
• Monitor transactions.
• Detect suspicious activity.
• Support customer service operations.

Selfie and ID Verification

When you submit a selfie and identity document:

• We compare your selfie with your identification document.
• We verify document authenticity.
• We confirm account ownership.
• We detect impersonation and fraud.
• We maintain records required for regulatory compliance.

Your verification data is handled securely and used only for legitimate business, legal, security, and compliance purposes.

Your Privacy Matters

FimiPay is committed to using your information responsibly and implementing appropriate safeguards to protect your privacy, security, and trust.