This privacy policy (“Policy” and/or “Privacy Policy”) governs the manner in which Paymob Group (hereinafter to as “Paymob” and/or “We”) including all its subsidiaries and affiliates, collects, uses, maintains, and discloses personal and non-personal information when you use our website, web application, and mobile application. This Privacy Policy applies to the website, web application, mobile application, platform and all products and services offered by Paymob or under the brand names affiliated or associated with Paymob.

Paymob implements stringent technical and organizational measures to ensure that your privacy is protected and secured with reasonable controls and measures. You can be certain that we shall use your personal information only in accordance with this Policy. Please read and understand this Policy carefully to know our practices regarding collection, storage, transfer, maintenance, disclosure, retention and usage of your personal data.

Paymob reserves the right to make changes to this Policy at any point in time at its sole discretion, Our business changes constantly, and accordingly update this page. Please check this page periodically to make sure you read and agree with the changes. And, if deemed necessary, we will provide a more prominent notice. Unless stated otherwise, our current Policy applies to all personal information we have about you and your account.

By signing up to our website, web application or mobile application and utilizing or accessing the features built in thereby or using any of Paymob products or services, you accept and agree to adhere to the terms of our Policy as well as the terms and condition for Cyber Security and Personal Data protection, Bearing in mind that this privacy policy is a supplement to the notices and other privacy policies, and is not intended to cancel or invalidate them.

Paymob will never materially change our Policies and practices to make them less protective of personal information collected in the past without informing affected customers and giving them a choice.
This Privacy Policy applies to all Paymob Group entities and comply with data protection standards, GDPR and applicable Personal Data Protection Laws (PDPL).

Personal Information Paymob’ Requests From You

By personal information, we mean information related to a specific individual from which such individual can be identified. Anonymous information does not constitute personal information as the identity of the individual cannot be recognized. The personal information which may be collected by Paymob include the following:

1. Personal Information you and/or your customers are directly providing to Paymob while signing up to Paymob website, mobile application or platform.
2. Personal documents and financial records you and/or your customers are directly providing to Paymob as part of integration.

Financial information which is provided by you and/or your customers while using payment gateway for payment processing. Information collected by cookies and other tracking technologies while using Paymob website. We will information from your browser such as your computer’s internet protocol, browser type and version, length of the visit and the pages viewed etc.

From our service

1. Data collection from information you give to Paymob when search for, subscribe to, or purchase Paymob services;
2. Data collection from our payment services: the data collected from the merchants: we collect, store and process personal information related to you when you apply to become a merchant. Additional personal information may be required such as full name, email address, date of birth, home address, proof of address, phone number, and other similar contact information, bank statement, personal identification card or passport and other information as may be required to on-board you and to meet applicable legal and regulatory requirements, information about your location; information regarding identity, including government-issued identification information; corporate and financial information; and VAT numbers and other tax identifiers.
3. Data collected from cardholders/buyers: we collect, store, process financial and transaction related to personal data about the cardholders/buyers and their transaction, which may include, full name, email address, phone number, credit card number, payment information, including credit card and bank account information; expiry date, , billing and shipping address, IP address, browser type and version, purchase amount, date of the purchase, and cart description. Paymob does not store CVV after authorization and only processes card details in accordance with PCI DSS requirements.

Why Does Paymob Collect Your Personal Information?

1. To personalize user experience: we may use information to understand how our users as a group/collectively use the services and resources provided on the website, web application and mobile application
2. to provide and deliver Paymob services and process transactions related to Paymob services, products, including registrations, subscriptions, purchases, and
3. To improve customer service: your information helps us to respond effectively to your customer(s) service requests, inquiries and support needs.
4. To process your application: we may use the personal information collected to understand the nature and profile of your business and access your application.
5. For marketing purposes: we may use your personal information if you have “Opt in” for promotional activities of our new products and features, special offers and advertising our products.
6. To send periodic emails: the email address provided by you will be used to send information and updates pertaining to our site, products and our services. It may also be used to respond to your inquiries, and/or other requests. If the user decides to opt-in to our mailing list, they will receive emails that may include news, updates, related product, or service information, etc.
7. To identify and reduce fraudulent activity: we may use your information to detect, prevent, mitigate fraudulent activities such as risks associated with transactions, our systems and to monitor illegitimate activities.
8. To comply with the law: we may use your information when it is required to comply with legal obligations, financial, regulatory requirements and for audit purposes.
9. We use your personal information to communicate with you in relation to APS Services via different channels (e.g., by phone, email, chat) and to respond to your requests.
10. We may also ask for your consent to use your personal information for a specific purpose that we communicate to you.
11. We process personal information based as permitted under applicable data protection laws, including consent, performance of a contract, compliance with legal obligations, and legitimate interests.

Data Storage and Access

The data we collect from you are stored on our system servers. We take reasonable measures to protect your personal information from unauthorized access, use and/or disclosure. Although, we have adopted security measures appropriate which are in accordance with the industry practices, it does not assure or guarantee that no person will overcome or subvert the security measures and gain unauthorized access to your personal information. You should always ensure that your username and password are not shared with any third party to protect your personal information.

We may allow third party applications to access your information in cases where a need arises for verification of your data and other validation purposes. Paymob ensures that verification processes used by third party application will help to make your account safe from being used for fraud, any money laundering. By providing your personal information to us, you agree to the transfer to a third party, storing and processing of your personal information.

In cases where such storage or processing involves transferring personal information outside your jurisdiction, Paymob applies appropriate safeguards in accordance with applicable data protection laws, including the use of EU Standard Contractual Clauses (SCCs) or equivalent mechanisms under regional Personal Data Protection Laws (PDPL).

Your Rights Over Your Personal Information

You have certain rights over your personal information as per the applicable data protection laws including the following:

1. Request to erase the Personal Information: you reserve the right to request to remove any personal information except personal information is required to comply with the applicable data protection laws and regulations, for legal proceedings, compliance purposes and for any financial crime prevention purposes.
2. Request for personal information transfer: you have the right to request to export your information to a third-party where technically and legally feasible.
3. Request correction: you reserve the right to request to correct any information held by us where the personal information is incomplete, inaccurate, or outdated. This step will require verification of the new personal information provided.
4. Right to access your personal information: you have the right to receive a copy of your personal information that we hold, including certain information about how we are processing your personal information to the extent permissible by PCI-DSS, applicable data protection laws and the applicable financial data regulations.
5. Right to object to direct marketing: you have the right to object processing of your personal information for direct marketing purposes. To unsubscribe and “Opt out” from marketing and promotional mails, visit Login details in merchant dashboard.
6. Right to withdraw consent: where we rely on your consent to process personal data, you may withdraw it at any time without affecting the lawfulness of prior processing.
7. These rights do not affect Paymob’ ability to retain personal information where retention is required for legal, regulatory, fraud prevention, or compliance purposes.
8. Paymob will respond to rights requests in accordance with applicable data protection laws in your jurisdiction and may require verification of identity before processing such requests.

Disclosure of your Personal Information to Third Parties

Paymob may allow third party applications to access your information in cases where a need arises for verification of your personal information and other validation purposes. We ensure that verification processes used by third party application will help to make your account safe from fraud, any money laundering or illegal activities related to our services. We may disclose personal information to third parties for the purpose of providing payment services, promoting the business, as well as for legal reasons, as follows:

1. Service Providers: we may share your personal information with a limited number of service providers when it is necessary to deliver services, such as identity verification services, infrastructure hosting, data analysis, payment processors, customer service, email delivery. These service providers may need to access personal information to perform their services.
2. Business Partners: Paymob may share personal information with third-party business partners when it is necessary to provide the services to the Users such as acquiring banks and Payment processors.
3. Legal Claims: Where necessary, Paymob may utilize your personal information to protect the interest, rights, property or safety of Paymob, its employees and affiliates in the event of a legal claim and disclose them with any third party if we have a belief in good faith that access, use, maintenance or disclosure of the personal information is judiciously necessary to meet any applicable law, regulation, legal process or enforceable governmental request, and enforce applicable terms of service including investigation of potential violation, fraudulent and security issues, or to enforce or apply our terms and other agreements, or protect the rights, property, or security of Paymob, our customers, or others. This includes exchanging information with other companies and organizations for fraud prevention and detection and credit risk

Data Usage and AI Processing Disclosure

This section governs the use of Global Channel-Facing Large Language Models (LLMs), such as ChatGPT, Claude, or Gemini, when connected to Paymob services:

. By connecting Paymob Application to a Channel Facing Large Language Model (“LLM”), You expressly acknowledges and agrees—based solely on your prior, informed, and explicit consent—that Paymob may process and use your data strictly in accordance with the purposes and limitations set forth herein.

1. Purpose of Processing: Paymob, through global channel facing large language models (“LLMs”), including but not limited to ChatGPT, Claude, Gemini, and other comparable artificial intelligence channels, processes data solely to execute Your initiated payment operations and to provide relevant financial information. Such processing is limited to the scope necessary for lawful and contractual services and is carried out based on your consent through global Channel Facing LLMs.
2. Data Accessed: Paymob may access and process the following categories of data:
   1. Merchant account details (e.g., merchant ID, integration ID)
   2. Transaction data (e.g., transaction status, amount, timestamps)
   3. Operational requests (e.g., payment link creation, balance and transfer inquiries)
3. Data Usage: Paymob should use the data accessed solely for the following purposes, based on your prior, informed, and explicit consent on the Global Channel Facing LLMs and through the connection of the Paymob Application via Global Channel-Facing Large Language Models (“LLMs”):
   1. Retrieval and display of requested merchant or transaction information
   2. Execution of Your initiated actions (e.g., generate payment links, check balances)
   3. Support for operational workflows such as reconciliation and reporting

1. Paymob should not use or share data for any purpose beyond the expressly stated scope, and all usage should comply with applicable data protection and cybersecurity law as well as the Your consent to process data via the Global Channel Facing LLMs.
2. You are solely responsible for the instructions, inputs, and actions you initiate through the AI channel interface. Paymob is not liable for outputs generated by the AI channel in response to your inputs, or for any decisions you make based on those outputs.
3. You agree to indemnify, defend, and hold harmless Paymob, its subsidiaries, parent companies, partners, and affiliates from and against any breach, damage, claims, losses, or expenses arising directly from instructions or actions you initiated through the connected AI channel.”

Data Not Collected AI Processing Disclosure

Paymob does not collect or process the following categories of data:

1. Full card numbers (PAN), CVV, or PIN data
2. Sensitive authentication data
3. Personal data beyond what is strictly required for the requested operation

Data Sharing at AI Processing Disclosure

Paymob may share data only under the following conditions:

1. With regulated financial partners when required to complete transactions and Subject to applicable legal and regulatory obligations.
2. Paymob should never sell, disclose, or use data for advertising purposes

AI Processing

1. Your input through OpenAI in order to generate responses within the Channel-Facing Large Language Model (“LLM”).
2. Paymob does not, under any circumstances, use this data to train AI models or for any purpose beyond the scope expressly set forth herein and based on your consent and Connect Paymob application via the Global Channal Facing Large Language Model (“LLM”).
3. Your input may be processed through OpenAI to generate responses within the Channel Facing Large Language Model (“LLM”).
4. Paymob should not, under any circumstances, use such data to train artificial intelligence models, nor for any purpose beyond the scope expressly set forth herein.
5. All processing is conducted solely on the basis of your prior, informed, and explicit consent, and exclusively through the connection of the Paymob Application via the Global Channel Facing Large Language Model (“LLM”).

User Control at AI Processing Disclosure

1. All actions through a connected AI channel are initiated solely by you. Paymob does not act independently of your instructions within the AI channel.
2. You should be solely responsible for such actions and for any data processed based on Your consent, without any liability on Paymob.
3. You retain full control over access to the Paymob Application and may revoke such access at any time by disconnecting the Paymob Application.

1. Paymob might sell or buy businesses or services. In such transactions, personal information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Policy (unless, of course, you consent otherwise). Also, in the unlikely event that Paymob or substantially all of its assets are acquired, your information will of course be one of the transferred assets.
2. We make available to you services, software, and content provided by third parties for use on or through Paymob services and may share personal information with those third parties to enable such services.

We might employ other companies and individuals to perform functions on our behalf. Examples include: sending communications, processing payments, assessing compliance, risks, analyzing data, verifying identity, fraud screening, and providing training. These third-party service providers have access to personal information needed to perform their functions, but may not use it for other purposes. Further, they must process that information in accordance with this Policy and as permitted by applicable data protection law.

Retention of your Personal Information

Paymob securely retains personal information in an identifiable format for the duration required by applicable laws. (including for tax and accounting purposes), and regulations in the jurisdiction where the service is being offered and for business purposes or as otherwise communicated to you. Paymob may retain personal information for longer periods than required retention period by law for business interests if it is not prohibited by applicable data protection law or any regulatory agency/authority. Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected or to meet legal, regulatory, fraud-prevention, and compliance requirements. Paymob will delete your personal information in accordance with applicable law.

Information We Retain After Your Account is Closed

After the closure of your account with Paymob, we may need to keep certain information for an additional period of time for legal and legitimate business purposes. For example, we may retain personal information such as your contact information (e.g., name, email address, physical address) and any invoices that Paymob has sent to you (e.g., record of purchases, applicable discounts, and tax information) for tax and accounting purposes. If applicable, Paymob may also retain records of communications with you, as well as relevant logs (e.g., a log of your account closure) for dispute resolution purposes. We further may keep records for preventing fraud and ensuring security, for example in case of misuse of our services or violation of our terms.

Paymob Methods of Securing Information

1. Paymob maintains a variety of compliance programs that validate our security controls.
2. Paymob protects the security of your information during transmission to or from its websites, mobile applications and platform, or services by using encryption protocols and software.
3. Paymob follows the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.

Third Party Websites and Services

Paymob may embed content provided by others or include links to other websites and applications or you may find advertising on our website that provides links to the sites and services of our partners, suppliers, advertisers, sponsors, and other third parties. These companies may collect information about you when you interact with their content or services.

We do not control the content or links that appear on these sites and are not responsible for the contents published or practices employed by those websites. We are not responsible for the practices of these companies. Please check their privacy policies to learn about their data practices.

Browsing and interaction on any other website, including websites which have a link to Paymob website, is subject to third party website terms and policies. We do not guarantee protection and privacy of information which you may provide to such websites.

Warning: Paymob encourages users to review the privacy policies of any third-party websites or services they visit, as those providers are solely responsible for their own data protection practices.

Internet Cookies

Cookies are text files, used by your computer’s browser, that store visitor session data. Cookies, by themselves, do not identify the individual user. Cookies are commonly used on the Internet and do not harm your system.

Cookies are mainly used to measure web traffic, for keeping records and to let you know when you visit a particular site. But cookies never give us access to any other information other than what you chose to share with us.

Cookies also help us in analyzing data to be used in improving our website, eventually giving you a better user experience. Users generally have the option to accept or decline cookies. However, please note that you will not get the full benefit of using the website if you chose to decline.

Users may also manage, restrict, or disable cookies at any time through their browser settings.

For more information on how we use cookies, please refer to our cookies banner posted on the website. By using the Paymob website and accepting the cookie banner, you agree to be bound by our cookie policy.

Updating your Information

If your personal or professional information (such as your name, address, or telephone number) needs change, you must make sure that all your information are accurate and updated your details by contacting Paymob on our Contact Us page.
To avoid inconvenience to all, Paymob strongly advices to keep all information up-to-date and correct. Paymob will be exempted from any responsibility in the rare event where losses may arise from not updating your information.

Contact Us

If you have questions, comments or complaints about this Policy or any action is required in relation to your personal information, please contact us at security@paymob.com

This contact channel may also be used to submit requests relating to your privacy rights or any data protection concerns.