1. Introduction

UBA Paychap ("we," "our," or "us") is a contactless payment acceptance platform offered by United Bank for Africa (UBA) Côte d'Ivoire and powered by Qredet Digital SARL, the technology infrastructure provider.

UBA Paychap enables merchants and customers to conduct contactless payments using QR codes and Tap-to-Pay technologies.

UBA acts as the licensed financial institution responsible for transaction processing, merchant settlement, and regulatory compliance, while Qredet provides the underlying technology infrastructure supporting the platform.

This Privacy Policy explains how personal information is collected, used, processed, stored, and protected when users access or interact with the UBA Paychap platform.

This Policy applies to:

• UBA Paychap mobile applications
• UBA Paychap merchant applications
• UBA Paychap administrative dashboards
• Related websites, services, and subdomains

By accessing or using the platform, you acknowledge that you have read and understood this Privacy Policy.

2. Definitions and Key Terms

• UBA Paychap: A digital payment platform offered by United Bank for Africa (UBA) and powered by Qredet technology infrastructure.
• Bank / Financial Institution: United Bank for Africa (UBA), the licensed banking institution responsible for payment processing and settlement.
• Technology Provider: Qredet Digital SARL, the fintech company responsible for developing and maintaining the platform infrastructure.
• Customer: Any merchant, business, or individual using UBA Paychap services.
• Device: Any internet-connected device such as a smartphone, tablet, or computer.
• Personal Data: Information that identifies or can identify a person.
• Platform / Service: The UBA Paychap payment platform including applications, dashboards, APIs, and related services.

3. What Information Do We Collect?

Information is collected to enable payment processing, fraud prevention, regulatory compliance, and service improvement.

3.1 Personal Data Provided by Users

This may include:

• Full name
• Email address
• Phone number
• Business or merchant information
• Payment references and transaction records
• Login credentials (stored in encrypted format)

UBA Paychap does not store full card numbers or sensitive payment card data. Payment transactions are processed through secure banking infrastructure and PCI DSS compliant systems.

3.2 Automatically Collected Technical Data

When users interact with the platform, the following may be collected:

• IP address
• Device type
• Browser information
• Application usage data
• Login session logs
• System performance metrics

This information helps maintain platform security, fraud prevention, and system reliability.

3.3 Mobile Device Permissions (With Consent)

The application may request access to:

• Camera – for QR scanning and document capture
• Location – for security verification
• Contacts – optional for peer-to-peer payment features
• Photos – for uploading identity verification documents

Permissions can be disabled through device settings.

3.4 Biometric Verification

For identity verification and regulatory compliance, biometric verification may be used. Examples include:

• Facial recognition verification
• Liveness detection
• Identity verification checks

Biometric verification is conducted through trusted KYC verification partners. Biometric data is not stored permanently and is never used for advertising purposes.

4. Legal Basis for Data Processing

Data is processed in accordance with:

• Côte d'Ivoire Data Protection Law (Law No. 2013-450)
• ARTCI data protection regulations
• AML / KYC regulatory obligations
• Legitimate business interests such as fraud prevention and service security

5. How Information Is Used

Collected data may be used to:

• Provide payment services
• Process merchant transactions
• Prevent fraud and unauthorized activities
• Support customer service
• Improve product performance
• Comply with regulatory requirements

6. Sharing of Information

Information may be shared with:

• United Bank for Africa (UBA) as the licensed financial institution
• Qredet Digital SARL as the technology infrastructure provider
• Identity verification providers
• Payment processing partners
• Regulatory authorities when legally required

UBA Paychap does not sell personal data to third parties.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill service and regulatory obligations.

Financial transaction data may be retained for a minimum of five (5) years in compliance with AML/KYC regulations.

Biometric verification data is deleted once verification is completed unless retention is required by law.

8. Security Measures

UBA Paychap maintains industry-standard security practices including:

• Encrypted communications (TLS/SSL)
• Encrypted data storage
• Secure payment gateways
• Access control policies
• Continuous security monitoring

9. International Data Transfers

Some data processing may occur outside Côte d'Ivoire through trusted service providers. Appropriate safeguards such as Standard Contractual Clauses (SCCs) are implemented to ensure adequate protection.

10. Your Rights

Users have the right to:

• Access personal data
• Request correction of inaccurate information
• Withdraw consent
• Request deletion where legally permitted
• Object to certain processing activities

Requests can be submitted via the support contact listed below. To exercise your rights, contact [email protected].

11. Cookies and Tracking Technologies

UBA Paychap uses cookies and similar technologies to:

• Maintain login sessions
• Analyze platform performance
• Improve user experience

Users can control cookies through browser settings.

12. Third-Party Links

The platform may contain links to external websites or services. UBA Paychap is not responsible for the privacy practices of third-party websites.

13. Governing Law

This Privacy Policy is governed by the laws of Côte d'Ivoire and supervised by:

Autorité de Régulation des Télécommunications / TIC (ARTCI)

UBA Paychap also aligns with international data protection standards including GDPR principles where applicable.

14. Changes to This Policy

UBA Paychap may update this Privacy Policy periodically. Users will be notified through:

• Email notifications
• In-app messages
• Website announcements

Continued use of the platform constitutes acceptance of updates.

15. Contact Information

For privacy questions or requests:

• UBA Paychap
• A product of United Bank for Africa (UBA) powered by Qredet Digital SARL
• Abidjan, Côte d'Ivoire
• Email: [email protected]
• Website:: www.ubapaychap.com