Privacy Policy

This Privacy Policy explains how PayNovaX ("we", "us") collects, uses, shares and protects personal information when you use our platform and the cards made available through it.

Account data. Your email address, name, and the one-time codes used to confirm sign-in and sensitive actions.

Identity data. Where the card program requires verification, the identity details and documents you supply, together with the status and outcome of those checks.

Financial data. Your account and card balances, deposits, top-ups, withdrawals and card transactions, including merchant and amount information returned by the card network.

Blockchain data. The deposit addresses generated for your account and the on-chain transactions associated with them. Blockchain records are public and permanent, and we cannot alter or delete them.

Technical data. Device and browser information, IP address, and usage data generated as you use the platform.

Communications. Messages you send to support and our replies.

We use your data to operate your account and cards, process deposits and transactions, verify your identity, detect and prevent fraud and financial crime, provide support, send service messages about your account, meet legal and regulatory obligations, and maintain and improve the platform.

Card program partner and issuing institution.To issue and operate cards, authorise transactions and meet the issuer's compliance obligations, we share account, identity and transaction data with the partner that operates the card program and with the institution that issues the cards.

Service providers. We use SendPulse to send account and service email, Render to host the platform, and Google Analytics for aggregate usage measurement where it is enabled.

Authorities and advisers. We may disclose data where required by law, regulation, court order or a lawful request, and to professional advisers where necessary.

We do not sell your personal data.

We keep personal data for as long as you have an account and afterwards where we are required to retain it, in particular for anti-money laundering and financial record-keeping purposes.

Sign-in is protected with one-time codes by email or authenticator app, session cookies are restricted so page scripts cannot read them, and sessions expire automatically. You can freeze a card instantly from your account if you suspect a problem. Our security page describes these protections in more detail.

No system is completely secure, and you play a part in protecting your account by keeping your credentials and one-time codes to yourself.

We set a session cookie when you sign in. It is strictly necessary: the platform cannot keep you signed in without it. It is not readable by scripts running in the page and it expires automatically.

Where Google Analytics is enabled we use it to understand aggregate usage of our public pages. We do not use advertising or cross-site tracking cookies.

Depending on where you live, you may have rights to access a copy of your data, correct it, delete it, restrict or object to processing, receive it in a portable form, and complain to a supervisory authority.

Some rights are limited where we are required to retain data for financial crime and record-keeping purposes, or where data is recorded on a public blockchain and cannot technically be altered or erased.

To exercise a right, contact legal@paynovax.io.

The platform is not for anyone under 18. We do not knowingly collect data from children, and we will delete it if we discover we have.

We may update this policy from time to time. Material changes will be communicated by email or in-app notice, and the version date above will change.

Privacy enquiries: legal@paynovax.io