This Privacy Policy explains how we collect, use, and protect your personal data when using our digital payments and remittance services.

Effective Date: Insert Date

TodaPay ("we," "us," or "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our digital payment and remittance services, especially within the South Africa and Zimbabwe corridor.

1. Introduction

TodaPay is committed to ensuring the privacy and security of your personal information. By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.

2. Information We Collect

Identity Data

We collect the following personal information for service delivery and KYC compliance:

  • Full name
  • Phone number
  • Email address
  • Residential / physical address
  • Date of birth
  • Identity documentation (ID/Passport) for KYC verification

Transaction Data

We collect transaction-related information, including:

  • Transfer and remittance amounts
  • Recipient details
  • Transaction timestamps
  • Payment method details (Stripe, Pesepay, Ozow, etc.)

Technical Data

We collect system and device data such as:

  • Device information
  • IP address
  • Operating system
  • Usage patterns across our app and website

3. How We Use Your Information

We use your personal information for the following purposes:

  • Service Delivery: To operate, maintain, and provide TodaPay services such as remittances (SA ↔ ZW), P2P transfers, and bill payments.
  • Security & Compliance: To comply with AML, KYC, Central Bank requirements, and financial regulations.
  • Communication: To send transaction receipts, system updates, and customer support messages.

4. Sharing Your Information

Service Providers: We share information with trusted partners such as Ozow, Pesepay, Stripe, and payout processors solely to enable secure payments and transfers.

Regulatory Authorities: We may share your data with South African and Zimbabwean regulators when required for compliance, financial reporting, or fraud prevention.

5. Data Security

We use high-level physical, electronic, and administrative measures—including encryption, secure servers, and access controls—to protect your information. Our processes comply with industry standards such as PCI DSS.

6. Your Rights

You have the right to access, update, or correct your personal information at any time. You may contact our support team to exercise any of these rights.

7. Contact Us

If you have questions or concerns regarding this Privacy Policy or how we handle your data, please contact us here.