1 Information We Collect
At PayWay Kenya (payway.co.ke), we take data privacy and protection under the Kenya Data Protection Act (2019) seriously. We collect the following information when you use our platform:
- Merchant Account Data: Username, email address, password hash, and KYC verification documents.
- Transaction Logs: Transaction reference numbers, amounts, payment timestamps, and customer phone numbers for M-Pesa STK Push prompts.
- Channel Identifiers: M-Pesa Till numbers, Paybill shortcodes, and bank account numbers configured for payment settlement.
2 How We Use Your Data
Your information is used strictly to provide payment prompt automation and ledger services:
No Data Monetization: PayWay Kenya NEVER sells, rents, or monetizes merchant or customer payment data to third-party advertisers.
- To dispatch Safaricom Daraja STK Push prompts to customer mobile phones.
- To deduct prompt service fees (KES 5.00) from your Service Wallet.
- To provide real-time transaction reporting and digital receipts.
3 Encryption & Data Security
All communications between your browser or server and PayWay APIs are encrypted using 256-bit TLS/SSL encryption. Sensitive passkeys and secret tokens are stored using salted bcrypt hashing and encrypted environment variables.
4 Contact Privacy Officer
If you have questions regarding our data privacy practices or wish to request data erasure, please contact:
- Email: [email protected]
- Phone: +254 796 804 535