Legal / Privacy

Privacy Policy

Effective date: June 2, 2026

1. Information We Collect

We collect account data, transaction metadata, KYC records, and support interactions.

2. How We Use Information

To process payments, prevent fraud, meet regulatory obligations, and improve service quality.

3. Data Sharing

Data may be shared with regulated banking partners, payment channels, and legal authorities as required.

4. Data Retention

Transactions: 7 years. KYC records: 5 years after account closure.

5. Security

VaultPay uses 256-bit AES, TLS 1.3, PCI-DSS Level 1 aligned controls, and MFA enforcement.

6. Your Rights

You may request Access, Correction, Erasure, Portability, and Object to processing where applicable.

7. Cookies

Cookie usage details are provided in our standalone Cookie Policy page.

8. International Transfers

Where cross-border transfer is required, contractual and technical safeguards are applied.

9. Children's Privacy

Our services are not intended for children under legal age for financial services usage.

10. Contact

DPO: privacy@vaultpay.pk · General: hello@vaultpay.pk

Data Category Table

CategoryExamplesPurpose
Identity DataCNIC, business registrationKYC and compliance
Transaction DataAmount, channel, statusPayment execution
Security DataIP, device logsFraud and risk defense