Oentrix Pay ("we", "us", "our") provides an online payment and fund-management platform that lets registered users hold a wallet balance, add funds through supported payment methods, generate payment links and invoices for their own customers, and manage merchant "brand" configurations. This Privacy Policy explains what information we collect through the website and dashboard, why we collect it, and the choices available to you.
By creating an account or otherwise using the service, you agree to the collection and use of information as described here.
We collect information you provide directly (such as when registering, adding funds, or setting up a brand/merchant profile), information generated automatically as you use the service (such as transaction records and device data), and information received from third parties you choose to connect (such as Google, when you sign in with Google).
When you register, we collect your first and last name, email address, and phone number. If you sign in with Google, we receive the profile information Google shares with us (typically your name and email address).
We store your account credentials (in hashed/encrypted form, never as plain text), your current wallet balance, your timezone preference, and any avatar or profile details you add. If you create a merchant "brand", we also store the brand's configuration, API credentials, and webhook/notification settings that you provide.
We record details of transactions you make or receive through the platform: amount, currency, payment method (e.g. bKash, Nagad, Binance, or bank/QR transfer), status, and timestamps. We do not store full card or mobile-wallet PINs; payment credentials are handled by the relevant payment gateway, and we store only the transaction reference and status information the gateway returns to us.
We may log basic technical information about the device and browser you use to access the service, such as browser type and operating system, for security and troubleshooting purposes.
We log IP addresses and basic usage/activity data (such as sign-in times and actions taken in the dashboard) as part of our account-security activity log, so that suspicious activity can be reviewed.
We use cookies that are required for the service to function - specifically, a session cookie to keep you signed in and a security (CSRF) cookie to protect forms from cross-site request forgery. These cookies are set as Secure and HttpOnly and are not used for third-party advertising. You can control cookies through your browser settings, but disabling required cookies will prevent you from signing in.
We use the information above to: create and manage your account; process fund additions and other transactions; generate invoices and payment links you request; send account-related emails (welcome, verification, password recovery, payment notices); provide customer support; and maintain the security and integrity of the platform.
Funds you add are processed by third-party payment gateways. When a payment is completed, the gateway sends us a status confirmation, which we independently verify with the gateway before crediting your wallet balance. We do not credit a wallet based on unverified information from a browser or link alone.
We do not sell your personal information. We share information only: with the payment gateways needed to process a transaction you initiate; with service providers who help us operate the platform (such as email/SMS delivery and hosting providers); or where required by law.
The platform can integrate with third-party services you choose to use, including Google Sign-In, payment gateways (bKash, Nagad, Binance, and others as enabled), Google reCAPTCHA, and SMS providers. Each of these third parties has its own privacy practices governing the information it processes.
We apply technical safeguards including encrypted/hashed password storage, secure (HTTPS-only, HttpOnly) session cookies, CSRF protection on forms, and server-to-server verification of payment callbacks. No online service can guarantee absolute security, but we work to protect your information using these industry-standard measures.
We retain account and transaction records for as long as your account is active, and afterward for as long as needed to comply with our accounting, fraud-prevention, and legal obligations. Records are not kept for longer than necessary for these purposes.
You can review and update most of your personal information directly from your account's Profile/Settings page at any time. You may also contact us to request a copy of the personal information we hold about you, or to ask questions about how it is used.
You may contact us to request deletion of your account. Because transaction records may need to be retained for accounting, tax, or fraud-prevention purposes even after an account is closed, some transaction history may be retained in an archived form rather than fully deleted.
This service is intended for users who are legally permitted to hold and transact with a payment account in their jurisdiction. We do not knowingly collect personal information from children.
Pages on this site, and payment links generated by our merchants, may link to third-party websites. We are not responsible for the privacy practices of those external sites.
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the service after a change becomes effective constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or how your information is handled, please contact us:
