Privacy Policy

1. Introduction

X-Pay and Xara (our AI financial assistant) are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp-based financial services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Phone number, name, email address
• Financial Information: Transaction history, wallet balance, payment preferences
• Communication Data: Messages you send to Xara via WhatsApp
• Authentication Data: PIN (encrypted), biometric data (if enabled)

2.2 Information Automatically Collected

• Usage Data: Features used, session duration, interaction patterns
• Device Information: Phone model, operating system, WhatsApp version
• Location Data: Country/region (for compliance and fraud prevention)

3. How We Use Your Information

We use your information to:

• Provide financial services (transfers, deposits, withdrawals, bill payments)
• Process transactions and maintain transaction records
• Verify your identity and prevent fraud
• Improve our AI assistant and user experience
• Send transaction confirmations and account notifications
• Comply with legal and regulatory requirements
• Provide customer support via Xara

4. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted is encrypted using TLS/SSL
• Secure Storage: Financial data stored in encrypted databases
• PIN Security: PINs never stored in plain text; hashed using bcrypt
• Access Control: Strict access controls and authentication
• Regular Audits: Security assessments and penetration testing

6. Data Sharing and Disclosure

We may share your information with:

• Payment Providers: MTN, Orange Money, Stripe (to process transactions)
• Service Providers: Cloud hosting, AI services (OpenAI), analytics
• Legal Authorities: When required by law or to prevent fraud
• Business Transfers: In case of merger, acquisition, or sale

We never sell your personal data to third parties.

7. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update incorrect information
• Deletion: Request account and data deletion (see Data Deletion Policy)
• Portability: Export your transaction history
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Stop using the service at any time

8. Contact Us