Privacy Policy

1. Who this policy covers

This policy applies to the NexoPay mobile application, website and related support services. “NexoPay”, “we” and “us” refer to the developer and operator of the pre-launch NexoPay product.

2. Information we collect

• Account data such as name, email address, phone number, NexoTag and authentication identifiers.
• Profile and identity-verification data, which may include document images, selfies, face-check results, nationality, date of birth and verification status.
• Test financial data such as wallet balances, currencies, recipients, transaction references, payment-method tokens, statuses and support cases. We do not intend to store full card numbers or card security codes.
• Device and security data such as device model, operating system, session information and security events.
• Content you choose to provide, including profile photos, feedback and bug reports.

3. Camera, photos and biometrics

With your permission, the app may use the camera or photo library to scan a payment card, upload a profile image, capture identity documents or perform a face check. Biometric authentication provided by your device is processed by the operating system; NexoPay does not receive your fingerprint or face template.

4. How we use information

We use information to create and secure accounts, provide test features, perform identity checks, detect abuse, maintain an audit trail, respond to support requests, comply with applicable obligations and improve reliability.

5. Service providers

Our test environment uses service providers that may process data on our behalf, including Google Firebase for authentication, databases, storage and server functions, and Stripe for sandbox card tokenisation and payment testing. Providers process information under their own terms and privacy commitments.

6. Sharing

We do not sell personal information. We may share data with contracted service providers, professional advisers, regulators or law-enforcement authorities where legally required, and with a successor in a properly managed corporate transaction.

7. International processing

Because the product is designed for cross-border use and relies on international cloud providers, information may be processed in countries other than where you live. We will implement appropriate safeguards before production launch.

8. Retention and security

We retain information only for as long as needed for testing, security, legal obligations and dispute handling. We use access controls, encrypted transport, protected credentials and administrative audit logging. No system can guarantee absolute security.

9. Your choices and rights

You may request access, correction or deletion of your account data, subject to security, fraud-prevention and legal-retention requirements. See our account deletion page.

10. Children

NexoPay is not intended for children. The minimum eligible age will be confirmed before public launch based on applicable law and partner requirements.

11. Changes and contact

We may update this policy as the product, legal entity and regulated partners are established. Material changes will be shown on this page. Privacy questions: privacy@nexopayglobal.com.