Privacy Policy

1. Introduction

BoazPay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website boazpay.com, apply for merchant processing services, or engage with our ISO Agent Program. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site.

2. Information We Collect

2.1 Personal Identification Information

We may collect personally identifiable information, including but not limited to:

• Full name, date of birth, and government-issued ID details
• Email address, phone number, and mailing address
• Business name, DBA, registration documents, and ownership structure
• Banking and financial details for underwriting purposes
• Processing history, chargeback data, and monthly volume estimates
• LinkedIn profile and professional background (for Agent applicants)

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical data, including IP address, browser type, device identifiers, referring URLs, and pages visited. We use cookies and similar technologies — see our Cookie Policy for details.

2.3 Information from Third Parties

We may receive information from credit bureaus, identity verification providers, fraud prevention services, and publicly available databases as part of our merchant underwriting and KYC/AML compliance obligations.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and evaluating merchant account and agent applications
• Verifying identity and conducting KYC/AML due diligence
• Communicating with you about your application, account, or inquiry
• Providing customer support and account management
• Complying with legal, regulatory, and contractual obligations
• Detecting, preventing, and investigating fraud and financial crime
• Improving our website, services, and user experience
• Sending marketing communications where you have given consent

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing personal data include:

• Contractual necessity — processing required to enter into or perform a contract with you
• Legal obligation — processing required to comply with AML, KYC, and other regulatory requirements
• Legitimate interests — fraud prevention, security monitoring, and service improvement
• Consent — marketing emails and non-essential cookies, which you may withdraw at any time

5. Sharing and Disclosure of Information

We do not sell your personal data. We may share information with:

• Acquiring banks and payment networks — required for merchant account approval
• Identity verification and fraud screening providers — for KYC compliance
• Legal and regulatory authorities — where required by law or court order
• Service providers and processors — who assist in operating our platform under strict confidentiality agreements
• Business successors — in the event of a merger, acquisition, or asset sale

6. International Data Transfers

BoazPay operates globally. Your data may be transferred to and processed in countries outside your jurisdiction, including the United States and the United Kingdom. We rely on standard contractual clauses and other appropriate safeguards to ensure your data receives adequate protection wherever it is processed.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations (including AML record-keeping requirements of up to 7 years), resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right to access your personal data
• Right to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"), subject to legal retention requirements
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at legal@boazpay.com.

9. Security

We implement industry-standard security measures including 256-bit SSL encryption, access controls, data minimization practices, and regular security audits. We are PCI DSS compliant and maintain SOC 2 certification. However, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such data, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

BoazPay — Legal & Compliance
Email: legal@boazpay.com
Wyoming, USA