NEXAPAY PRIVACY POLICY

First Published: Jun 2024
Last updated: April 2025

This Privacy Policy explains how NexaPay collects, uses, stores and protects your data when you use our services across jurisdictions.

1. Introduction

NexaPay (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services.

2. Scope and Applicability

This policy applies to all users of NexaPay services including merchants, payers, and visitors to our websites. Depending on your jurisdiction and the service used, your data may be controlled by NexaPay Pte. Ltd. (Singapore), and processed by NexaPay Fintech LLC (USA), NexaPay Fintech Ltd (Canada), and NexaPay Brasil LTDA (Brazil).

3. What Data We Collect

We collect the following categories of personal data:
– Contact Data (name, email, phone)
– Identification Data (passport, tax ID)
– Financial Data (bank account, payment history)
– Technical Data (IP address, device/browser info)
– Business Data (company registration, license info)

4. How We Use Your Data

We use your data to:
– Process payments and settlements
– Comply with AML, KYC, and legal obligations
– Detect fraud and suspicious activities
– Provide customer service and platform support
– Improve our services and perform analytics

5. Legal Basis for Processing

We rely on one or more of the following legal bases:
– Your consent
– Performance of contract
– Compliance with legal obligations
– Our legitimate interests

6. Data Sharing and Disclosure

We may share your data with:
– Affiliated entities within NexaPay Group (as needed to operate services)
– Regulatory and governmental authorities (where legally required)
– Payment and banking partners
– Cloud service providers and technical processors (see Section 7)
– Professional advisors (legal, audit)

7. Data Storage and Processing

Your data may be stored on Alicloud servers located in Hong Kong.

The server infrastructure is maintained by our contracted backend service provider, YueheHe Technology (Shanghai) Co., Ltd. (“YueheHe”), which provides IT and infrastructure support. YueheHe is contractually bound to act only on instruction from NexaPay and does not access or process personal data except for maintenance under supervision.

We take appropriate legal and technical steps to ensure that your data is protected from unauthorized access and is processed only for legitimate purposes.

8. International Transfers

Your data may be transferred to and processed in countries outside your place of residence, including Singapore, Brazil, the United States, Canada, and Hong Kong. We implement safeguards to ensure a legally compliant level of protection, including Standard Contractual Clauses where required.

9. Data Retention

We retain personal data as long as required by law or our business needs. After an account is closed, we may pseudonymize or archive the data but retain the right to access it to comply with our legal obligations or resolve disputes.

10. Your Rights

Depending on your jurisdiction, you may have the right to:
– Access and correct your data
– Request deletion or restriction of processing
– Withdraw consent where applicable
– Request portability
– Lodge a complaint with your local authority

11. Security

We implement industry-standard measures to protect your personal data, including encryption, firewalls, and access controls. We conduct periodic audits and compliance checks to ensure ongoing protection.

12. Updates to This Policy

We may revise this Privacy Policy from time to time. The latest version will always be available on our website and will indicate the date of revision.

13. Contact

For privacy-related inquiries, contact us at:

NexaPay Pte. Ltd.
Address: 68 Circular Road, #02-01, Singapore 049422
Email: contact@b2b-nexapay.com