Privacy Policy
How TZPayWay protects, processes, and safeguards data for merchants, liquidity agents, and platform users with bank-grade encryption and complete transparency.
For Merchants
API keys, transaction records, customer order telemetry, and automated USDT payout wallet addresses are encrypted and strictly guarded.
For Liquidity Agents
Working vault balances, local bank & mobile wallet channel details, order dispatch logs, and instant commission settlements operate with immutable audit trails.
Bank-Grade Security
TLS 1.3 data-in-transit encryption, AES-256 data-at-rest protection, zero storage of payment credentials or PINs, and automated fraud prevention.
Scope & Account Architecture
This Privacy Policy governs the manner in which TZPayWay collects, uses, maintains, and discloses information gathered from users across our ecosystem. This applies to:
- Merchants & Businesses: Commercial entities utilizing TZPayWay API endpoints, checkout pages, and webhooks to accept local payments and receive USDT payouts.
- Liquidity Agents: Registered liquidity providers who maintain active working balances in USDT and fulfill local currency deposit and withdrawal transactions.
- Payers & Customers: End consumers making payments to merchants through TZPayWay payment links and checkout interfaces.
- Visitors: Anyone accessing our public landing pages, portals, documentation, and web consoles.
Information We Collect
We only collect information necessary to provide reliable payment processing, verify transactions, prevent fraud, and execute settlements.
A. Merchant Profile & Integration Data
Business name, representative contact email, phone number, hashed login passwords, registered API keys, callback & webhook URLs, withdrawal USDT wallet addresses (TRC20 / BEP20), and business category.
B. Liquidity Agent Verification & Banking Data
Agent identification details, assigned payment channels (bKash Personal/Agent, Nagad, Rocket, Upay, Local Bank Accounts), account holder numbers, security verification data, and on-chain USDT deposit addresses for working balance liquidity.
C. Transaction & Payment Verification Data
Unique order IDs (e.g. #TZ-XXXXXX), order amounts in local currency and calculated USDT, chosen payment channel, payer submission timestamps, transaction IDs (TrxID) provided by the user for payment verification, and order completion receipts.
D. Technical & Security Telemetry
IP addresses, browser user agent, device operating system, request headers, API error logs, rate-limiting counters, and session authentication tokens.
Processing Purposes & Legal Basis
We process collected data under explicit legal bases including contract performance, legal compliance, and legitimate operational interests:
- Order Execution: Routing local payment instructions, verifying incoming deposits, crediting merchant balances, and executing USDT payouts.
- Liquidity Agent Allocation: Matching customer deposit requests to available verified liquidity agents with adequate working balance.
- Security & Anti-Fraud Monitoring: Detecting suspicious transaction velocity, duplicate transaction identifiers, unauthorized API requests, and account compromises.
- System Reliability: Monitoring uptime, resolving gateway latency, and ensuring webhook delivery with exponential backoff retries.
- Regulatory & Accounting Compliance: Generating immutable ledger entries, financial reconciliation reports, and complying with statutory audit guidelines.
Merchant & Agent Order Matching
TZPayWay operates a specialized automated matching infrastructure:
• When an end-customer initiates a deposit, the system dynamically displays an active liquidity agent’s receiving account number for that specific channel.
• The agent receives only the necessary order reference and transaction amount to verify the transfer receipt. Personal customer credentials, merchant API keys, and underlying merchant database information are never exposed to agents.
• Once the deposit is verified, equivalent USDT is automatically transferred from the agent’s working balance to the merchant with zero manual intervention.
Data Security & Encryption Protocols
We employ enterprise-grade security standards to ensure complete integrity and confidentiality:
End-to-end encryption for all API traffic and encrypted database storage for sensitive tokens and configurations.
Strict isolation between administrative, merchant, and agent operational data with granular permissions.
Cryptographic hashing of secret keys, signature verification, and automated IP rate-limiting protection.
We never ask for or store customer banking passwords, wallet PINs, or mobile money security codes.
Disclosures & Blockchain Transfers
We do not sell, rent, or trade your personal or business information to any marketing third parties. Disclosures occur only in the following specific circumstances:
- Public Blockchain Ledgers: On-chain USDT settlements (via TRON / BSC networks) create immutable public transaction hashes recording the recipient wallet address and transfer amount.
- Operational Service Providers: Trusted infrastructure and server partners under strict non-disclosure obligations.
- Legal & Regulatory Demands: When required by enforceable court orders, authorized legal processes, or to safeguard against imminent financial fraud.
Retention & Erasure Schedules
Account and profile records are retained for as long as your merchant or agent account remains active. Financial ledger entries and transaction histories are retained in compliance with statutory financial recordkeeping obligations (typically 5 to 7 years) to support audit and legal reconciliations. Upon valid closure request, personal identification markers are anonymized.
Your Privacy Rights & Access
Regardless of location, TZPayWay provides all merchants and agents comprehensive control over their information:
Cookies & Telemetry
We use essential session cookies and security tokens to maintain logged-in state, protect against Cross-Site Request Forgery (CSRF), and save interface preferences. We do not deploy third-party advertising tracking cookies or sell your browsing behaviors to advertising brokers.
Contact & Data Protection Officer
If you have questions, feedback, or requests regarding this Privacy Policy, please reach out to our legal and data protection team: