Privacy Policy

1. Introduction

This Privacy Policy is issued by XPay ("XPay" or "we") and explains how we collect, use, disclose, and protect your information when you use our payment services, platform, or website. This Policy applies to our merchants, their representatives, and visitors to our website.

2. Legal Framework

XPay is a company licensed and supervised by the Central Bank of Egypt (the "CBE"), and processes customer data in accordance with applicable Egyptian law, including the confidentiality obligations applicable to entities supervised by the CBE under the Central Bank and Banking System Law No. 194 of 2020, and the regulations and instructions issued by the CBE.

3. Information We Collect

We collect the information you provide to us directly or that arises from your use of our services, including:

• Personal identification data (name, email address, and phone number);
• Business data (company name, tax registration number, and business address);
• Financial data (bank account details and payment card data);
• Transaction data and payment history;
• Technical data (IP address, browser type, and device data).

4. How We Use Your Information

We use the information we collect in order to:

• Process and facilitate payment transactions;
• Verify your identity and prevent fraud, in accordance with anti-money laundering (AML) and know-your-customer (KYC) requirements;
• Provide customer support and respond to inquiries;
• Improve and secure our services;
• Comply with legal obligations and regulatory requirements;
• Send you service notifications relating to your account and transactions.

5. Data Security

We apply industry-standard security measures to protect your information. XPay is PCI-DSS certified and complies with the security requirements of the CBE. We use encryption, secure servers, and regular security audits to protect your data.

6. Data Sharing and Disclosure

We may share your information with:

• Financial institutions and payment networks, to the extent necessary to process transactions;
• Service providers who assist us in our operations, under confidentiality obligations;
• Regulatory authorities and law enforcement, where required by applicable law;
• Business partners, with your explicit consent.

We do not sell your personal information to third parties.

7. Data Retention

We retain your information for as long as necessary to provide our services and to comply with our legal and regulatory obligations. Transaction records and customer identification data are retained for a period of no less than five (5) years in accordance with applicable anti-money laundering requirements, and for any longer period determined by the CBE or any other applicable law.

8. Your Rights

Subject to applicable law, you have the right to:

• Access and obtain a copy of your personal data;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data;
• Object to or restrict certain processing of your data;
• Withdraw consent where processing is based on it.

These rights do not extend to data that XPay is required to retain or process under applicable law or CBE requirements, including anti-money laundering record-keeping obligations. To exercise any of these rights, contact us at info@xpay.app. We will respond within a reasonable period.

9. Data Hosting and Transfer

Your information is stored and processed in accordance with CBE requirements. Where any processing involves infrastructure or service providers outside Egypt, that processing is carried out in compliance with applicable CBE requirements and with appropriate safeguards in place.

10. Cookies

We use cookies and similar technologies on our website. For details of the cookies we use and how to manage them, please refer to our Cookie Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified by posting the updated Policy on our platform and revising the "Last Updated" date above.

12. Contact and Complaints

If you have questions or inquiries about this Privacy Policy or our data practices, contact us at info@xpay.app. If a matter is not resolved to your satisfaction, you may escalate it in accordance with the consumer protection framework issued by the Central Bank of Egypt.