Privacy Policy

Information we process

Depending on the service and relationship, YembiPay may process partner organization and operator details, API and security metadata, settlement and recipient records, compliance evidence, support communications, public-form submissions, and technical request data.

How we use information

• Provide, secure, reconcile, support, and improve the service.
• Authenticate organizations and enforce tenant and role boundaries.
• Apply compliance controls, create audit evidence, investigate incidents, and meet legal obligations.
• Respond to deliberately submitted partnership, corridor, support, or developer requests.

Credentials and sensitive data

Partner API keys must not be sent through contact forms or support messages. Browser partner sessions use encrypted HttpOnly cookies and short expiry. YembiPay designs logs and analytics to exclude credentials, raw beneficiary bank data, and other unnecessary sensitive fields.

Sharing and service providers

Information may be shared with approved infrastructure, compliance, chain, banking, payout, communications, and professional-service providers only for defined operational or legal purposes, subject to applicable agreements and controls.

Retention and security

Retention depends on the record, contract, legal requirement, audit need, and dispute lifecycle. Security controls include encryption in transit, access control, tenant isolation, secret management, redaction, monitoring, backup, and tested recovery. No system can guarantee absolute security.

Your choices and rights

Applicable rights may include access, correction, deletion, restriction, objection, portability, and withdrawal of consent. Financial, compliance, audit, and legal records may need to be retained despite a request.

Contact

Privacy questions and rights requests: privacy@yembipay.com. Security reports: security@yembipay.com.