Privacy Policy

Last updated: 29 July 2026

This Privacy Policy explains what personal data GoBaoPay ("we", "us") collects, why, and how we handle it. It applies to sellers using the platform and to buyers who open a payment request page.

1. What we collect

• Seller account data: business name, phone number, email address, and a hashed password.
• Payment request data: the amount, currency, description, and buyer name a seller enters when creating a request.
• Buyer-facing data: when a buyer opens a payment request link, we display the request details. We do not require buyers to create an account and do not collect buyer payment credentials — those are entered directly with the buyer's chosen payment provider (PayPal, Alipay, WeChat Pay, bank, Wise, Remitly), not with GoBaoPay.
• Technical data: IP address, browser type, and basic access logs, collected automatically for security and reliability.

2. What we don't collect

GoBaoPay never receives or stores payment card numbers, bank account credentials, or payment provider passwords. Because funds move directly between buyer and seller through the seller's own payment account, GoBaoPay has no access to the underlying payment instrument.

3. How we use this data

• To operate the Service: authenticate sellers, generate and display payment requests, and track paid/pending status.
• To provide support when a seller contacts us.
• To maintain the security and integrity of the platform.
• To comply with legal obligations where applicable.

We do not sell personal data, and we do not use it for third-party advertising.

4. Sharing

We share data only with service providers who help us run the Service (such as our hosting and infrastructure provider, Cloudflare), under agreements that require them to protect it, and where required by law, regulator, or valid legal process.

5. Data retention

We retain account and payment request data for as long as the account is active, plus a reasonable period afterward for legal, tax, and dispute-resolution purposes. You can request deletion as described below.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or request deletion of your personal data. To exercise these rights, contact [email protected].

7. International transfers

Our infrastructure provider may process data in multiple regions. Where personal data is transferred internationally, we rely on appropriate safeguards required by applicable data protection law.

8. Security

See our Security page for details on how we protect data in transit and at rest.

9. Children

GoBaoPay is a B2B tool and is not directed at, or intended for use by, children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered sellers.

11. Contact

Questions about this policy can be sent to [email protected]. Data controller: [Legal entity name], [Registered address].