Privacy Policy

1. Introduction

QisstPay ("we," "our," or "us") is operated by Olivas Venture Capital. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Buy Now Pay Later platform, mobile applications, and website (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our Services.

2. Information We Collect

2.1 Personal Information

When you register for an account or use our Services, we may collect:

• Full name, date of birth, and CNIC (Computerized National Identity Card) number
• Phone number, email address, and mailing address
• Financial information including bank account details, income information, and credit history
• Employment information including employer name and employment status
• Device identifiers, IP addresses, and browser information

2.2 Transaction Data

We collect information about your transactions through QisstPay, including purchase amounts, merchant details, payment history, and installment schedules.

2.3 Automatically Collected Information

When you access our Services, we automatically collect device information, usage data, log files, cookies, and similar tracking technologies to improve our platform and detect fraud.

3. How We Use Your Information

We use the information we collect to:

• Process your BNPL applications and make credit decisions
• Facilitate installment payments and manage your account
• Verify your identity and comply with regulatory requirements including KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations
• Detect, prevent, and investigate fraud and security issues
• Communicate with you about your account, payments, and promotions
• Improve, personalize, and optimize our Services
• Comply with applicable laws, regulations, and directives from the Securities and Exchange Commission of Pakistan (SECP) and the State Bank of Pakistan (SBP)

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Merchant Partners: Limited transaction data necessary to process your purchases
• Credit Bureaus: Payment history and account information as required by law
• Service Providers: Third-party vendors who assist with payment processing, identity verification, fraud prevention, and analytics
• Regulatory Authorities: Information required by the SECP, SBP, FBR, or other governmental bodies as mandated by law
• Legal Proceedings: When required by court order, subpoena, or applicable law

5. Data Security

We implement industry-standard security measures including encryption (TLS 1.3), secure data storage, access controls, and regular security audits. All financial data is encrypted at rest and in transit. While no system is 100% secure, we are committed to protecting your information using the highest standards available.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. We also retain information as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Financial records are retained in accordance with SECP and SBP regulations.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, subject to legal and regulatory retention requirements
• Opt out of marketing communications at any time
• Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us at privacy@qisstpay.com.

8. Cookies and Tracking

We use cookies and similar technologies to maintain session information, remember preferences, analyze usage patterns, and prevent fraud. You can manage cookie preferences through your browser settings, though disabling cookies may limit certain features of our Services.

9. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will promptly delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our Services after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: