WhaPay

Privacy Policy

Last updated: April 2026

WhaPay ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and payment services.

1. Information We Collect

We collect information that you voluntarily provide to us when you register, make a payment, or contact us:

  • Personal Information: Name, phone number, email address, business name (for merchants).
  • Payment Information: Transaction amounts, payment methods (M-Pesa, card), and transaction status.
  • Technical Data: IP address, browser type, device information, and usage statistics via Firebase Analytics.

2. How We Use Your Information

  • Process and complete payments via M-Pesa (Safaricom) and Stripe (card payments).
  • Create and manage your merchant account (Member Code, QR code).
  • Send transaction confirmations via WhatsApp and SMS.
  • Improve our services, fraud detection, and customer support.
  • Comply with legal and regulatory requirements.

3. Data Sharing & Third Parties

We do not sell your personal data. We share information only as necessary:

  • Payment Processors: Safaricom (M-Pesa API) and Stripe (card payments) – subject to their privacy policies.
  • Firebase (Google): We use Firebase to store transactions, user data, and analytics. Data is stored on Google Cloud servers.
  • Legal Compliance: If required by law or to protect our rights.

4. Data Security

We implement industry-standard security measures, including HTTPS encryption, Firebase security rules, and regular audits. However, no method of transmission over the internet is 100% secure.

5. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data (subject to legal retention requirements).
  • Opt out of non-essential communications.

To exercise these rights, contact us at support@whapay.com.

6. Data Retention

We retain transaction data for up to 7 years for accounting and legal purposes. User account data is retained until you request deletion.

7. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us: