Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Last Updated: January 1, 2025

Key Points at a Glance

We never sell your personal information

Bank-grade encryption protects your data

You can request data deletion anytime

1. Information We Collect

We collect information in several ways to provide and improve our services: Personal Information: • Name, email address, phone number • Business name and address • Bank account and payment details • Government-issued identification (for verification) Technical Information: • IP address and device information • Browser type and version • Operating system • Usage patterns and preferences Transaction Information: • Payment and transaction history • Account balances • Merchant and customer data • Dispute and chargeback records

2. How We Use Your Information

We use the collected information for: • Processing and completing transactions • Verifying your identity and preventing fraud • Providing customer support • Sending important service notifications • Improving our products and services • Complying with legal and regulatory requirements • Conducting security and risk assessments • Personalizing your experience We do not sell your personal information to third parties.

3. Information Sharing

We may share your information with: Financial Partners: Banks and payment networks to process your transactions. Service Providers: Third parties that help us deliver our services (e.g., cloud hosting, analytics). Legal Requirements: When required by law, court order, or government request. Business Transfers: In connection with a merger, acquisition, or sale of assets. With Your Consent: When you authorize us to share information with third parties. All third parties are contractually obligated to protect your data and use it only for the specified purposes.

4. Data Security

We implement robust security measures including: • End-to-end encryption for all data transmissions • Secure data centers with physical security controls • Regular security audits and penetration testing • Multi-factor authentication for account access • Employee training on data protection • Incident response procedures Our security practices comply with: • PCI DSS (Payment Card Industry Data Security Standard) • SOC 2 Type II • ISO 27001 • GDPR (where applicable)

5. Data Retention

We retain your information for as long as necessary to: • Provide our services to you • Comply with legal obligations • Resolve disputes and enforce agreements • Maintain accurate business records Retention periods vary based on the type of information: • Transaction records: 7 years (regulatory requirement) • Account information: Duration of your account plus 3 years • Marketing data: Until you withdraw consent • Security logs: 1 year You may request deletion of your personal data, subject to legal retention requirements.

6. Your Rights

Depending on your location, you may have the following rights: • Access: Request a copy of your personal data • Correction: Request correction of inaccurate data • Deletion: Request deletion of your personal data • Portability: Receive your data in a portable format • Objection: Object to certain processing activities • Restriction: Request limitation of processing • Withdrawal: Withdraw consent at any time To exercise these rights, please contact us at Info@fintechlet.com.

7. Cookies and Tracking

We use cookies and similar technologies to: Essential Cookies (Required): • Enable core functionality • Maintain your session • Remember your preferences Analytics Cookies: • Understand how you use our services • Identify areas for improvement • Measure the effectiveness of marketing Marketing Cookies: • Deliver relevant advertisements • Track campaign performance You can manage cookie preferences through your browser settings. Disabling certain cookies may affect functionality.

8. Cross-Border Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place: • Standard Contractual Clauses (SCCs) • Binding Corporate Rules (BCRs) • Data processing agreements • Adequacy decisions where applicable We maintain the same level of protection regardless of where your data is processed.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at Info@fintechlet.com. We will take steps to delete such information promptly.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect: • Changes in our data practices • New regulatory requirements • Technological advancements • Service modifications We will notify you of material changes via: • Email to your registered address • Prominent notice on our website • In-app notification Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Our Privacy Team

For any questions or concerns about this Privacy Policy or our data practices:

Fintechlet Data Protection Officer

Email: Info@fintechlet.com

Phone: +92 344 444 4481

Address: 41-Agro Square, Near Gourmet Bakers, Shadman Market, Lahore, Pakistan