PTW Pay - Privacy Policy

Last updated: January 29, 2026

1. Introduction

PTW Pay ("we", "our", "us") operates the PTW Pay mobile application and web dashboard (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Full name - to identify you within the Service
• Email address - for account authentication and communication
• Phone number - for account verification and contact
• Password - stored in hashed form only; we cannot read your password
• Account role - whether you register as a buyer, vendor, or event organizer

2.2 Financial Information

To facilitate payments, we collect and store:

• Bank account details - IBAN, BIC, and account holder name
• Wallet balances - your main wallet and per-event wallet balances
• Transaction history - payment amounts, descriptions, timestamps, and parties involved

2.3 Event and Vendor Data

• Event participation - which events you join or organize
• Vendor information - business name, booth number, and application status
• QR code data - generated for vendor payment identification

2.4 Automatically Collected Information

• Device information - device type and operating system (collected by third-party SDKs)
• Camera access - used only for QR code scanning; no images are stored

3. How We Use Your Information

• Providing and maintaining the Service
• Processing payments between buyers and vendors at events
• Managing event participation and vendor applications
• Authenticating your identity and securing your account
• Communicating with you about your account or transactions
• Preventing fraud and ensuring platform security
• Complying with legal obligations

4. Third-Party Services

Our Service uses the following third-party components:

• Google ML Kit - used for QR code scanning.

We do not sell, trade, or share your personal data with third parties for advertising or marketing purposes.

5. Data Storage and Security

• Passwords are hashed using bcrypt and cannot be reversed
• Authentication tokens are stored in encrypted device storage
• Data is transmitted over encrypted connections
• Financial data is stored in a secured PostgreSQL database

6. Data Retention

We retain your personal data for as long as your account is active. Transaction records may be retained for up to 10 years to comply with financial record-keeping regulations.

7. Your Rights

• Access your personal data through your profile and transaction history
• Correct inaccurate data by updating your profile
• Delete your account and associated data through the app or web dashboard
• Object to processing of your data by contacting us

8. Children's Privacy

Our Service is not intended for use by anyone under the age of 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time.

10. Contact Us

PTW Pay
Email: privacy@ptwpay.com