Privacy policy

Who we are

PayVault provides offline payment technology to licensed partners such as banks, mobile money operators and fintechs. When you use a wallet provided through a partner, that partner is responsible for your account and decides how your data is used. PayVault processes data on its behalf.

For the pilot request form and this website, PayVault decides how data is used. You can reach us through the contact page.

What we collect

• Account: your email address, the name you enter, your country, currency and language.
• Identity checks: the type of ID you verify with and your resulting verification level. The ID number is checked and not stored.
• Device: the public half of the signing key created on your phone, and a short device label. The private key never leaves your phone.
• Payments: amounts, dates, the merchant or payer, offline payment records and loan records needed to settle and account for them.
• Pilot requests: the name, work email, organisation and details you send through the contact form.

What we do not collect

• No advertising or third-party analytics trackers.
• No location tracking.
• No payment card numbers.

Why we use it

• To run your wallet: sign-in, offline vaults, settlement and overdraft.
• To prevent and detect fraud, including double-spending checks.
• To meet the legal duties of the partner that provides your wallet.
• To reply to pilot requests.

Where it is stored

Data is stored with Supabase in London (United Kingdom) and the service is hosted by Vercel. Partners may require data to be kept in their own country; that is agreed per partner.

Cookies and local storage

All of these are strictly necessary. We do not set marketing cookies, so there is no consent banner.

• A sign-in session cookie, needed to keep you signed in.
• A language cookie (pv_locale) that remembers English or French.
• Your theme choice in local storage.
• On your phone, the wallet stores your signing key, offline vault and unsent payments so it works without a network.

How long we keep it

Payment and ledger records are kept as long as the partner's financial record-keeping rules require. Pilot requests are deleted after 24 months without contact.

Your rights

You can ask for access to, correction of or deletion of your data, subject to the record-keeping duties above. For a wallet, contact the partner that provides it; for anything else, use the contact page.