Privacy Policy, FlashPaym

In plain terms: we collect the minimum data needed to onboard and support merchants, and to route payments. We never sell your data. Payment data passed to JazzCash, Easypaisa, banks, or our licensed aggregator partners is handled under their own regulated privacy and security standards.

1. Scope of this policy

This Privacy Policy explains how FlashPaym (operated by MMR Technologies (Pvt.) Ltd.) collects, uses, and protects information about merchants and their customers who interact with our service.

2. Information we collect

Merchant account data: business name, CNIC, registration documents, contact details, bank/wallet account information provided during KYB.
Transaction data: amounts, timestamps, rail used, and status of payments routed through FlashPaym.
Technical data: IP address, device and browser information, collected automatically for security and analytics.
Support communications: messages sent to us via WhatsApp, email, or the dashboard.

FlashPaym does not directly collect or store customers' full card numbers, wallet PINs, or OTPs, these are handled entirely within JazzCash, Easypaisa, or the customer's banking app.

3. How we use information

To onboard and verify merchants (KYB/AML compliance).
To route and process transactions, and generate settlement reports.
To detect and prevent fraud.
To provide merchant support.
To meet legal and regulatory obligations under Pakistani law.

To process transactions, relevant data (e.g. transaction amount, merchant identifier) is shared with our licensed payment aggregator partner(s) and the relevant rail (JazzCash, Easypaisa, or the receiving bank via Raast/IBFT). Each of these handles data under its own SBP-regulated privacy and security obligations. We do not sell merchant or customer data to third parties for marketing purposes.

5. Data retention

We retain merchant KYB and transaction records for as long as your account is active, and for a minimum period thereafter as required by SBP record-keeping regulations (typically at least 5 years for financial transaction records).

6. Security

We use encryption in transit (HTTPS/TLS) for all dashboard and API traffic, and restrict access to merchant data to authorized personnel only. No system is perfectly secure, and we encourage merchants to use strong, unique passwords and enable any available account security features.

7. Your rights

You may request access to, correction of, or deletion of your merchant account data, subject to our legal obligation to retain certain financial records. Requests can be sent to the contact below.

8. Cookies

Our website and dashboard use essential cookies required for login sessions and security, and may use basic analytics cookies to understand site usage. You can control cookies through your browser settings.

9. Children's data

FlashPaym is intended for use by business merchants and is not directed at individuals under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or dashboard notice.

11. Contact

For privacy-related questions or requests, contact support@flashpaym.com.

Privacy Policy