Privacy Policy

Effective date: 1 June 2025

Optimasys Solutions operates XPay. This policy explains how we handle your data when you use XPay to accept and reconcile payments.

What we collect

Merchant and contact details, payment transaction data, API credentials, and support communications.

How we use it

To process and reconcile payments, operate the platform, meet regulatory obligations, and send service notices. We do not sell your data.

Who we share it with

Payment rail providers (EcoCash, OneMoney, O'Mari, InnBucks, Visa/Mastercard, Zimswitch), trusted service providers acting on our instructions, and authorities where required by law.

Security & retention

Payment payloads are AES-GCM encrypted with JWT-authenticated access and a full audit trail. Data is retained while your account is active and deleted within 90 days of termination, unless a longer period is required by law.

Your rights

You may request access, correction, or deletion of your data at any time.

Contact

Questions? Email us at info@optimasyssolutions.com.