Privacy Policy

Effective date: 1 June 2025

Optimasys Solutions operates the XPay payments platform. This policy explains how we collect, use, and protect your information when you use XPay to accept and reconcile payments.

What we collect

Merchant account details (business name, contact name, email address), payment transaction data (amounts, references, statuses), API credentials and webhook configurations, invoice and reconciliation records, usage and access logs, and messages sent to our support team.

How we use it

To process and reconcile payments on your behalf, operate and improve the platform, deliver real-time payment notifications and reports, respond to support requests, meet regulatory and anti-money-laundering obligations, and send important service notices. We do not sell your data.

Who we share it with

Payment rail providers required to complete transactions (EcoCash, OneMoney, O'Mari, InnBucks, Visa/Mastercard networks, Zimswitch), trusted service providers (hosting, email, monitoring) who act on our instructions, your organisation's authorised administrators, and legal or regulatory authorities where required by law.

Security & retention

All payment payloads are AES-encrypted in transit and at rest. Access is controlled via stateless JWT authentication with a full audit trail on every transaction. Data is retained while your merchant account is active and deleted within 90 days of account termination, unless a longer retention period is required by law.

Your rights

You may request access to, correction, or deletion of your personal data at any time. Contact us and we will respond within 30 days.

Contact

Questions? Email us at info@optimasyssolutions.com.