QPay Users’ Data Privacy Policy
QPay is committed to protecting your personal data and privacy of its users. This policy explains how we collect, use, store, and protect your information when you use our mobile app, website, and related services.
1. Information We Collect
We collect the following types of data, as permitted under Nepal law:
a. Personal Identification Data
- Full name
- Date of birth
- Citizenship/passport/PAN number
- Photograph
- KYC documents
b. Contact Information
- Mobile number
- Email address
- Permanent and current address
c. Financial & Transaction Data
- Bank account/linked wallet details
- Transaction records (amount, date, time, recipient)
- UPI/QR codes
d. Device & Technical Data
- Device ID and model
- IP address
- Mobile OS and app version
- Location data (with your consent)
2. Purpose of Data Collection
We collect your data to:
- Verify your identity (KYC/AML compliance)
- Enable secure digital payments
- Prevent fraud and abuse
- Provide customer support
- Notify you of transactions, promotions, or policy updates
- Improve and personalize app functionality
3. Legal Basis for Processing
Your data is collected and processed based on:
- Your explicit consent
- Fulfillment of legal obligations (e.g., NRB or FIU requirements)
- Our legitimate interest in providing secure financial services
4. Sharing of Information
We may share your data with:
- Licensed Banks and Financial Institutions (BFIs) for payment processing
- Nepal Rastra Bank (NRB) and FIU-Nepal, if legally required
- Regulatory bodies or courts under court orders
- Third-party vendors (e.g., SMS gateways, KYC service providers) — under confidentiality obligations
We do not sell or rent your personal information.
5. Data Storage & Retention
- Your data is securely stored on encrypted servers located within Nepal (or permitted jurisdictions).
- We retain data as required by law (e.g., NRB directives) or for service continuity.
- After the retention period, data is securely deleted or anonymized
6. User Rights (as per Nepal law)
As a QPay Nepal user, you have the right to:
- Access your data
- Correct inaccurate or incomplete data
- Withdraw consent at any time (which may limit services)
- Request deletion (if legally permissible)
- Lodge complaints with relevant regulators (if applicable)
7. Data Security Measures
We use modern security measures such as:
- Two-factor authentication (2FA)
- End-to-end encryption of transactions
- Secure server hosting
- Regular security audits and updates
8. Children’s Privacy
QPay is intended only for users aged 18 years or older. We do not knowingly collect data from minors.
9. Updates to the Policy
We may update this privacy policy to comply with changes in law or service improvements. We will notify users via app notification or SMS.