Privacy policy

Last updated: April 2026. Describes processing for morapay.com and related applications.

This policy explains how Morapay ("we", "us") handles personal data when you visit our sites, use our dashboards or APIs, or interact with payment flows we power. If you are in the EEA/UK, we identify our roles (controller vs. processor) in agreements with business customers where applicable.

1. Data we collect

  • Account — name, email, phone, company details, and credentials you provide.
  • Transactions — amounts, currencies, timestamps, counterparties, and technical metadata needed to process and reconcile payments.
  • Verification — identity documents and checks performed with vendors for KYC/KYB as required by law and risk policy.
  • Technical — IP address, device identifiers, cookies, and logs for security and debugging.

2. How we use data

We process data to provide and improve the Services, comply with law, prevent fraud, and support you.

3. Legal bases (where GDPR applies)

Depending on context we rely on contract, legitimate interests (such as fraud prevention and product analytics), legal obligation, or consent where required.

4. Sharing

We share data with payment partners, verification providers, cloud hosting, and analytics vendors under contracts that limit use to service delivery. We may disclose information if required by law or to protect rights and safety.

5. Retention

We keep data as long as needed for the purposes above, including statutory retention for financial records, then delete or anonymize it according to our retention schedule.

6. Security

We use administrative, technical, and organizational measures appropriate to risk. No method of transmission over the Internet is completely secure.

7. Your rights

Depending on your location, you may have rights to access, rectify, delete, restrict, or port your data, and to object to certain processing. Contact us to exercise rights; you may also lodge a complaint with a supervisory authority.

8. International transfers

Where we transfer data across borders we use appropriate safeguards such as standard contractual clauses where required.

9. Children

Our Services are not directed at children under 16.

10. Changes

We will post updates here and adjust the "Last updated" date. Continued use after changes means acceptance where permitted by law.

11. Contact

Privacy questions: Contact or your account representative.