Privacy Policy

PayLens ("PayLens", "PayLens Business", "we", "our", or "us") provides digital payment verification, fraud prevention, and business management software services tailored for Ethiopian merchants, cafes, restaurants, hotels, retailers, and commercial enterprises.

This Privacy Policy explains in transparent detail how we collect, process, maintain, protect, and delete information when you visit our website (https://paylens.et), use the PayLens Business mobile application, access our web portals, or connect with our verification services.

We collect only the categories of data strictly necessary to provide reliable payment verification, user authentication, and business management:

We process and utilize the collected data strictly for the following operational purposes:

• To authenticate and verify customer digital payments in real time.
• To detect and prevent payment fraud, counterfeit receipt screenshots, and duplicate receipt reuse.
• To dispatch instant push notifications and audible confirmation chimes to merchant devices.
• To maintain daily transaction logs, audit trails, and financial reconciliation reports.
• To manage business subscription periods, wallet balances, promo codes, and referral reward credits.
• To ensure platform security, server stability, rate limiting, and system diagnostic integrity.

How Verification Operates: When an operator scans a payment QR code or enters a reference ID, PayLens queries official banking verification channels and receipt confirmation endpoints (such as Commercial Bank of Ethiopia, Telebirr, Bank of Abyssinia, Awash Bank, and CBE Birr Plus) solely to confirm that the funds were legitimately credited to the merchant's account.

We never request, collect, or store bank account passwords, debit/credit card CVVs, or online banking login credentials.

We respect your confidentiality and do NOT sell, rent, or trade your data to third-party marketing companies. Information is shared only under these strictly limited conditions:

• Banking Verification Systems: Transaction reference IDs entered by operators are queried against supported banking systems to verify authenticity.
• Cloud Infrastructure Providers: Trusted infrastructure providers (secure VPS hosting, PostgreSQL database, and Google Firebase for push notifications).
• Legal Compliance: When required to comply with applicable Ethiopian laws, regulations, court orders, or official law enforcement requests.

We implement rigorous technical and organizational security controls to protect your data:

• TLS 1.3 Encryption: All web and API communications are encrypted in transit.
• Bcrypt Hashing: Passwords and PIN credentials are securely hashed and never stored in plain text.
• Role-Based Access Control: Strict isolation ensures staff members only access their authorized branch operations.
• Encrypted Daily Backups: Regular automated database snapshots with integrity verification.

We retain merchant verification logs and transaction records for as long as the business account remains active to provide continuous audit logs, daily summaries, and bookkeeping history. When an account is terminated or deletion is requested, personal data is permanently purged in accordance with our deletion policy.

You have comprehensive control over your business data:

• Access, review, and update your business profile, staff roster, and payment accounts at any time.
• Instantly activate, deactivate, or delete staff profiles.
• Enable or disable push notifications and audio alerts via device settings.
• Export transaction records to CSV or JSON formats for offline auditing.

Business owners and users have the right to request permanent deletion of their account, staff records, and associated personal information.

PayLens Business is a commercial business management application intended exclusively for business owners, cashiers, and enterprise operators of legal working age (18+). We do not knowingly collect personal data from children under the age of 18.

Our platform interacts with select third-party services to deliver reliable features:

• Google Firebase (FCM): For delivering real-time push notifications to mobile devices.
• Bank Confirmation Endpoints: For querying payment receipt status.
• Official Support Channels: Official Telegram channels (@paylenss) for customer care.

Our cloud servers, databases, and verification APIs are hosted in secure, enterprise-grade data centers equipped with hardened firewalls, automated DDoS protection, and strict access controls.

We may update this Privacy Policy periodically to reflect new features, operational practices, or legal updates. When revisions occur, the "Last Updated" date at the top of this page will be revised accordingly.