Privacy Policy

Unicepay Privacy Policy

Effective date: July 1, 2026

Unicepay and its affiliates value the trust you place in us. This Privacy Policy explains how we collect, use, share, transfer, retain and protect personal and business information when you visit our website, submit an application, connect payment services, use merchant tools, process transactions, manage risk, or receive dispute and chargeback alerts.

This Policy works together with the service agreements, merchant agreements, payment-network rules, acquiring-channel requirements, anti-money-laundering rules and risk-control obligations applicable to your use of Unicepay. If you submit information on behalf of a company or another person, you must have the required authorization and provide any required notice to the relevant individuals.

1. Information We Collect and Why

We process information lawfully, fairly and only where necessary for clear business purposes. We may collect information directly from you, from merchants, partners, banks, acquirers, card networks, risk-control providers, public sources and other lawful third-party sources.

1. Identity and contact information: name, email, phone number, company name, title, country or region, address and communications, used for inquiries, applications, account setup, identity checks, support, notices and relationship management.
2. Merchant and business information: domains, website URLs, business categories, product or service descriptions, target markets, monthly volume, settlement needs, historical channels, chargeback or fraud experience, business qualifications, authorization documents, beneficial-owner and controller information, used for onboarding, due diligence, solution assessment, compliance review, risk scoring and ongoing monitoring.
3. Payment and transaction information: order IDs, transaction IDs, payment methods, network or local-payment identifiers, amounts, currencies, timestamps, payment status, refunds, disputes, chargebacks, fraud alerts, logistics or fulfillment information, device and network context, used for payment processing, reconciliation, clearing and settlement, risk monitoring, dispute handling, chargeback alerts and compliance.
4. Technical and log information: IP address, browser type, device model, operating system, language settings, access time, page views, clicks, referrers, Cookie identifiers, error logs and security logs, used for security, troubleshooting, performance improvement, abnormal-access detection, anti-abuse and experience optimization.
5. Compliance and risk information: sanctions screening, AML checks, counter-terrorist-financing checks, fraud-model results, blacklist matches, identity verification outcomes and materials required by regulators, card networks, banks or acquiring partners.
6. Customer-service and communications information: requests, questions, complaints, feedback, attachments and handling records submitted through forms, email, calls, online service, meetings or other channels, used to respond, follow up, improve services and keep necessary evidence.
7. Marketing and event information: preferences, subscription status, activity participation and partnership intent, used where permitted by law or with required consent to send service-related updates, invitations or business communications. You may unsubscribe from non-essential marketing at any time.

Some information may be sensitive, such as identity documents, payment accounts, transaction records, location, beneficial-owner materials or risk-screening results. We process such information only for specific and necessary purposes and apply stronger safeguards.

2. When and With Whom We Share Information

We do not sell personal information. To provide cross-border payment services, perform agreements and meet compliance obligations, we may share information where necessary and require recipients to process it only for agreed purposes under confidentiality and data-protection obligations.

1. Affiliates, for unified operations, support, risk control, financial settlement, compliance management and technical maintenance.
2. Banks, acquirers and payment channels, for payment processing, clearing, settlement, refunds, chargebacks, channel review and ongoing monitoring.
3. Card networks and dispute bodies, to comply with Visa, Mastercard, American Express, Discover, JCB and other network rules on authorization, clearing, fraud, disputes, chargebacks and assessments.
4. Anti-fraud and risk providers, for abnormal-transaction detection, malicious chargebacks, stolen-card risk, bot traffic, false registration, sanctions risk and blacklist screening.
5. Technology and infrastructure providers, for hosting, cloud storage, email notices, analytics, log monitoring, customer support and system operations.
6. Merchants, consumers and transaction parties, where necessary for orders, fulfillment, refunds, complaints, disputes and chargebacks.
7. Professional advisers and transaction parties, under confidentiality restrictions for audit, legal, compliance, financing, merger, restructuring, asset transfer or similar transactions.
8. Regulators, courts and law-enforcement authorities, where required by law, regulation, court order, arbitration, enforcement request or public-safety need.

Where permitted by law, separate consent may not be required for disclosures related to legal obligations, national or public security, criminal investigations, protection of vital interests, information you made public, information obtained from lawful public sources, or other legally permitted circumstances.

3. How We Protect and Store Information

We use reasonable safeguards including encrypted transmission, access controls, permission management, least-privilege authorization, log auditing, backups, vulnerability remediation, security training, vendor management and incident response. We seek to ensure that only personnel with a legitimate need can access relevant information.

No internet environment is absolutely secure. Please protect accounts, passwords, API keys, certificates, dashboard permissions and devices. If you detect leakage, misuse or abnormal activity involving accounts, keys, transactions or personal information, contact Unicepay immediately.

If a personal-information security incident occurs, we will take remedial measures as required by law and notify affected parties of possible impact, actions taken or planned, risk-reduction suggestions and contact channels. We will also report to authorities where required.

4. Cookies and Similar Technologies

Cookies are small data files stored in your browser or device. We may use first-party Cookies and, with required consent, third-party Cookies, pixels, local storage or similar technologies.

1. Necessary Cookies maintain website and payment sessions, protect forms, prevent fraud, remember language preferences and support core functions.
2. Analytics Cookies help us understand traffic sources, page performance, feature usage and errors.
3. Preference Cookies remember language, region, form status and other experience settings.
4. Security Cookies help identify abnormal logins, malicious requests, bot traffic, repeated submissions and attacks.

You can manage, delete or disable Cookies through browser settings or available preference tools. Disabling non-essential Cookies will not prevent basic service use, but may affect some experience features.

5. How Long We Retain Information

We retain information only for as long as needed for the purposes described in this Policy, considering service relationships, transaction completion, dispute and chargeback windows, accounting and tax requirements, AML and sanctions obligations, network rules, regulatory requirements, limitation periods and evidence preservation.

Transaction, settlement, chargeback, risk and compliance records may need to be kept after a business relationship or transaction ends. After the necessary period, we delete, anonymize or securely handle information as permitted by law. Where law or regulation requires continued retention, we follow those requirements.

6. Your Rights and Choices

Subject to applicable law, you may request access, copy, correction, supplementation, deletion, withdrawal of consent, restriction or objection to processing, account closure, data portability, explanation of automated decision-making logic, or information about sharing, transfers and public disclosure.

We may verify your identity and authorization before processing a request. For information needed for transaction security, compliance review, AML, sanctions, disputes, audits, regulatory investigations or legal obligations, we may be unable to delete or stop processing immediately, but we will explain why. You may unsubscribe from non-essential marketing at any time.

7. California Resident Rights

If you are a California resident, subject to applicable law, you may have the right to know, access, delete, correct and port personal information, limit the use of sensitive information, opt out of sale or sharing, and be free from discrimination for exercising privacy rights.

Unicepay does not operate for the purpose of selling personal information. If certain analytics or advertising technologies are treated as sharing under applicable law, you may opt out through Cookie settings or by contacting us. Authorized agents may submit requests where proof of authorization and identity verification are provided.

8. International Transfers

Cross-border payment services involve merchants, consumers, banks, acquirers, card networks, risk providers and cloud nodes in multiple jurisdictions. Your information may be transferred to, accessed from or stored outside your country or region for payment processing, settlement, dispute handling, risk alerts, support and compliance review.

We take measures required by applicable data-protection law, such as contractual safeguards, access controls, encrypted transmission, data minimization, vendor assessments and cross-border transfer compliance reviews.

9. Children

Unicepay services are intended for qualified businesses, merchants and business representatives, not children. We do not knowingly collect children personal information. If you believe children information has been submitted without authorization, contact us and we will delete it or take other necessary measures after verification.

10. Updates to This Policy

We may update this Policy due to changes in law, regulation, service functions, business scope, partners or data-processing practices. For material changes, we will notify you through website notices, page prompts, email or other reasonable methods. The updated Policy takes effect on the publication date or the date stated in the notice.

11. Contact Us

For questions, requests or complaints about this Policy or personal-information processing, contact support@unicepay.com. After verifying your identity, we will respond within the period required by applicable law.