Privacy Policy
About This Privacy Policy
This Privacy Policy describes how NYVA Payments (“Company,” “we,” “us” or “our”) collects, uses, and shares personal information when you use the NYVA Payments app, our website at nyvapay.com, and other services (together, the “Services”). The Google Play and Apple app store rules require that apps provide a clear, accurate privacy policy within the store listing and inside the app, describing the personal and sensitive data the app collects, its uses and sharing practices, and how users may delete or request deletion of their data. This policy fulfills those requirements.
Platform Notice: NYVA Payments is built on the Whop platform. Whop provides the payment processing, KYC services, and infrastructure for NYVA Payments. By using our Services, you also agree to Whop’s Privacy Policy and Terms of Service.
Information We Collect
We collect the following categories of information:
Account & Identity Information
When you register, we collect your name, email address, phone number, government-issued ID details, and other information necessary for Know Your Customer (KYC) compliance. Whop performs identity verification on our behalf; we receive confirmation of verification status but do not permanently store identification images.
Legal Basis: Legal obligation (anti-money-laundering and KYC laws), contract (to provide services), and legitimate interests.
Financial Information
We collect payment card details and bank account information for top-ups, withdrawals, and internal transfers. Payment data is processed via Whop’s secure payment platform; we do not store full card numbers and use tokenization.
Legal Basis: Contract (to process transactions) and legitimate interests.
Transaction Information
Records of top-ups, transfers, payments, and internal digital-currency credits and debits. We record transaction amounts, currency, date/time, sender/recipient identifiers, and status (e.g., pending, completed).
Legal Basis: Contract, legitimate interests, and legal obligation (anti-fraud monitoring).
Usage & Device Information
Device identifiers, IP address, operating system, app version, and usage statistics are collected via analytics tools to improve performance and detect abuse. The App uses cookies or similar technologies for session management and analytics; see our Cookie Policy.
Legal Basis: Legitimate interests (to secure and improve the Services).
Support & Communications
When you contact us for support or participate in surveys, we collect the information you provide and our communications with you.
Legal Basis: Legitimate interests (customer support) and consent where required.
Children’s Data
We do not knowingly collect information from children under the age of 13 (or the applicable local age). If you believe a child has provided personal data to us, please contact us immediately.
Legal Basis: Compliance with laws such as COPPA and the Jamaica Data Protection Act 2020.
How We Use Your Information
We use personal information to:
- Provide and maintain the Services: This includes setting up your account; verifying identity; processing transactions; showing your balances; and enabling internal transfers.
- Comply with legal and regulatory obligations: We use your information to comply with anti-money-laundering (AML) laws, the Jamaica Data Protection Act 2020, the GDPR, and other applicable laws.
- Communicate with you: We send administrative messages (e.g., confirmation emails, updates about your account), respond to support requests, and notify you of changes to our policies.
- Improve and secure our Services: We analyze usage data to understand how users interact with the App, fix bugs, and prevent fraud. We may also use aggregated data for analytics and business development.
- Marketing (with your consent): Where permitted by law, we may send promotional emails or notifications about new features. You can opt out at any time.
How We Share Your Information
We share personal information with:
- Payment Processor and Financial Partners: We share your information with our payment processor, which provides our payment processing and KYC services. Our payment processor works with third-party financial partners and bank partners to facilitate transactions.
- Service Providers: We engage third-party companies to perform services on our behalf (e.g., cloud hosting, analytics, customer support). These providers access personal information only as needed and under contractual obligations to protect it.
- Legal and Regulatory Authorities: We may disclose information when required by law, regulation, legal process, or governmental request, or to protect our rights, users, or the public.
- Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
We do not sell your personal information to third parties.
Data Retention
We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Transaction records are retained for at least seven years to comply with financial regulations. When information is no longer needed, we securely delete or anonymize it.
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal and regulatory requirements.
- Objection/Restriction: Object to or request restriction of certain processing activities.
- Data Portability: Receive your information in a structured, commonly used format.
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise these rights, contact us at privacy@nyvapay.com. We will respond within the timeframe required by applicable law.
International Data Transfers
Because we process data in Jamaica and other jurisdictions, we comply with the Jamaica Data Protection Act 2020 and international transfer rules. Where we transfer data outside of Jamaica, we rely on contractual safeguards (e.g., standard contractual clauses) and encryption.
Security
We implement technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. However, no system is completely secure. You are responsible for maintaining the security of your account credentials.
Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will post the updated policy on our website and app, and notify you of material changes via email or in-app notification. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.
Contact Us
For questions about this Privacy Policy or to exercise your rights, please contact:
Data Protection Officer
NYVA Payments
Email: privacy@nyvapay.com
Website: nyvapay.com