Dollr Services Ltd (“Dollr”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment APIs, merchant dashboard, developer portal, and related services (collectively, the “Services”).

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use immediately.

1. Information We Collect

Information you provide directly

Account information: Name, email address, phone number, business name, and password when you create a merchant account.
Identity verification: Government-issued ID, business registration documents, Tax Identification Number (TIN), and bank account details required by anti-money laundering (AML) regulations.
Transaction data: Payment amounts, beneficiary details, timestamps, and references for each transaction processed through our platform.
Communications: Support tickets, emails, and any other messages you send us.

Information we collect automatically

Usage data: Pages visited, API endpoints called, error logs, and feature interactions.
Device and network data: IP address, browser type, operating system, and device identifiers.
Cookies and similar technologies: Session tokens, preference cookies, and analytics identifiers. See our Cookie Policy for details.

Information from third parties

Identity verification providers (e.g., bureau checks, credit reference agencies).
Payment networks (card schemes, mobile money operators) for transaction validation.
Fraud detection partners for risk scoring.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Services.
Process payments and execute financial transactions on your behalf.
Verify your identity and comply with Know Your Customer (KYC) and AML obligations.
Detect and prevent fraud, money laundering, and other illegal activities.
Send transactional notifications, receipts, and security alerts.
Respond to your inquiries and provide customer support.
Improve and personalize the Services through usage analysis.
Comply with applicable laws, regulations, and regulatory requests.
Enforce our Terms of Use and other agreements.

3. How We Share Your Information

We do not sell your personal data. We share your information only in the following circumstances:

Service providers: Third-party vendors who assist with payment processing, cloud infrastructure, fraud prevention, identity verification, and customer support — bound by confidentiality agreements.
Payment networks: Card schemes, banks, and mobile money operators necessary to complete transactions.
Regulatory authorities: Financial regulators, law enforcement, or other government bodies when required by law or court order.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
With your consent: Any other sharing with your explicit permission.

4. Data Retention

We retain your personal data for as long as your account is active, and for a minimum of seven (7) years after account closure to comply with financial regulations and anti-money laundering laws applicable in our operating jurisdictions.

Transaction records may be retained longer where required by law. You may request deletion of non-regulated personal data by contacting us, subject to our legal obligations.

5. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. However, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and enable two-factor authentication on your account.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data where not required by law.
Portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests or for direct marketing.
Restriction: Request that we limit processing of your data in certain circumstances.

To exercise any of these rights, contact us at [email protected].

7. International Data Transfers

Dollr operates across multiple African countries. Your data may be processed in countries where data protection laws differ from your home country. We ensure appropriate safeguards are in place for any international transfers, including standard contractual clauses where applicable.

8. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform at least 14 days before taking effect. Continued use of the Services after the effective date constitutes acceptance.

10. Contact Us

For privacy-related questions or to exercise your rights, contact our Data Protection Officer:
Dollr Services Ltd
Email: [email protected]