Privacy Policy — KartaPay

Last Updated: June 2026

This Privacy Policy (the "Policy") aims to formalize KartaPay's commitment to respecting the privacy of all its users, whether they access our services via our website, web dashboard, or mobile application.

KartaPay offers several distinct services grouped under the same infrastructure: a Payment Gateway accessible via the showcase website, web dashboard, and mobile application, as well as a Classifieds Marketplace accessible via the mobile application. This Policy applies to all these services.

Personal data refers to any information relating to an identified or identifiable natural person. We collect and process personal data solely for the purpose of providing our Services. You will never be asked to provide sensitive data such as your racial or ethnic origin, political, philosophical or religious opinions.

By registering on KartaPay, you accept the processing of your data in accordance with this Privacy Policy. This Policy applies to all our services accessible via the website, web dashboard, and mobile application.

Part 1 — General Privacy Policy

We collect only personal data that is adequate, relevant, and strictly limited to what is necessary for the purposes for which it is processed.

1.1 Data Collected

Identification data

name, surname, email address, phone number

Connection data

IP address, connection date and time, operating system

1.2 Processing Purposes

Your personal data is collected and processed for the following purposes:

Creation and management of your user account
Provision and improvement of our services
Processing and monitoring of your transactions
Compliance with our legal and regulatory obligations

1.3 Data Retention

We retain your data only for as long as necessary for the purposes for which it was collected. Account data is retained for the duration of your subscription and then deleted upon request. Transaction data is retained in accordance with applicable legal and accounting obligations. If you delete your account, your personal data will be deleted and retained solely in archived form for legal and evidentiary purposes.

1.4 Data Security

We have implemented technical and organizational security measures to ensure the security, integrity, and confidentiality of your data, including:

Continuous monitoring of our infrastructure
Encryption of sensitive data in transit and at rest
However, as no security measure is foolproof, we cannot guarantee absolute security. It is your responsibility to maintain the confidentiality of your login credentials.
Certified and audited technical partners

Restricted access to data by our technical team

1.5 Data Sharing

We never sell, rent, or share your personal data with third parties for commercial or marketing purposes without your prior explicit consent. Your data may only be transmitted to technical partners acting on our behalf for service provision (hosting, payment, infrastructure), as well as to competent authorities when required by law. All technical partners are contractually committed to processing your data solely for the purpose of providing KartaPay Services.

1.6 Your Rights

In accordance with applicable data protection regulations, you have the following rights at all times: right of access (consult the data we hold about you), right of rectification (correct inaccurate or incomplete data), right to erasure (request deletion of your data), right to object (object to certain processing), right to data portability (retrieve your data in a structured format), right to withdraw consent (at any time and free of charge). To exercise your rights, contact [email protected] by providing a copy of an identity document.

Part 2 — KartaPay Payment Gateway

The KartaPay Gateway is a payment service allowing individuals and professionals to receive and make payments securely
We never store sensitive banking data directly on our servers. This data is processed exclusively by our certified payment partners.
It is accessible via the KartaPay showcase website for service presentation and onboarding, the web dashboard for transaction management and activity monitoring, and the KartaPay mobile application for field collection via QR Code or payment link.
We collect merchant identification data (name, surname or company name, email address, phone number, identity verification information), transaction data (amount, KMF currency, date, unique reference, status), payment method data (operator used such as Holo or MVola Comoros, associated phone number), and generation data (payment links created, QR Codes generated, timestamp).

This section applies to all users accessing KartaPay payment services, whether via the showcase website, web dashboard, or mobile application.

Part 3 — KartaPay Marketplace

3.1 Service Presentation

The KartaPay Marketplace is a classifieds platform accessible exclusively via the KartaPay mobile application. It allows individuals and professionals to publish sales ads, consult available offers, and conduct transactions between buyers and sellers in the Comoros.
This step aims to ensure compliance of content with our Terms of Use, the reliability and quality of published ads, and the safety of all platform users.
This section applies exclusively to users of the KartaPay mobile application accessing Marketplace services.

3.2 Ad Validation

Any ad published on the KartaPay Marketplace is subject to prior validation by our moderation team before being made visible to other users.

3.3 Data Collected

In the context of Marketplace use, we collect your account data (name, surname, phone number, location island/city), ad data (title, description, photos, price, category, ad location), contact data (information exchanged between buyers and sellers), and navigation data (categories viewed, ads seen, searches performed).

3.4 Data Usage

We maintain a history of ads published, modified, refused, or deleted associated with your account. Collected data is used to publish, moderate, and manage your ads, allow buyers to contact you, improve search result relevance, ensure platform security, and prevent abuse and fraud.

3.5 Data Sharing in the Marketplace

Your display name and location associated with your ads: Photos and information from your published and validated ads
Your phone number if you choose to make it visible on your ads: This data is shared only with KartaPay mobile app users and is never transmitted to third parties for commercial purposes.

Some of your data is made visible to other Marketplace users in the normal course of the service.

Your Rights

Your rights are detailed in Part 1 Section 1.6

Right of access: consult the data we hold about you
Right to rectification: correct inaccurate or incomplete data
Right to erasure: request the deletion of your data
Right to object: object to certain processing
Right to data portability: retrieve your data in a structured format
Right to withdraw consent: at any time and free of charge

[email protected]: [email protected]

Contact

For any questions regarding this Policy or to exercise your rights

📧 [email protected]

🌐 www.kartapay.me