Privacy Policy

SalonePay serves customers and organisations through separately governed country markets and payment corridors. The SalonePay entity and regulated financial partners responsible for a service are identified in the country and transaction disclosures. Country availability does not itself activate a payment service.

SalonePay processes identity and contact details, national identity or other identity references, date of birth, address, occupation, sector, KYC/KYB evidence, registered-device information, transaction instructions, beneficiaries, source-of-funds information, delivery preferences, purpose allocations, quote and route metadata, merchant and sector catalogues, transport operator and owner identifiers, vehicle or vessel details, accepted fare, trip points, distance source, accuracy and location only where authorised, cash-point information, support records, security events and compliance cases. Identity numbers are masked in routine views and protected through encryption, masking and access controls.

We process information to enrol and verify customers and organisations; provide wallets, payments, receiving, cash-in/out, merchant, transit, bill, voucher and settlement services; prevent fraud; meet AML/CFT and other legal duties; reconcile safeguarded funds; resolve complaints; maintain security and continuity; and produce legally required reports. The applicable legal basis may include contract, legal obligation, legitimate interests, public interest or consent, depending on the country and processing purpose.

Information may be shared on a minimum-necessary basis with applicable central banks, financial-intelligence units and identity authorities; sponsor and settlement banks; national switches; payment and card networks; mobile-money operators; billers; authorised agents and merchants; sector programme owners; and contracted processors. In Sierra Leone these authorities and partners may include the Bank of Sierra Leone, Financial Intelligence Unit, NCRA, approved identity providers and SaPS. Controls include encryption, KMS/HSM-backed keys, least privilege, audit logs, retention schedules, secure deletion, restoration-proven backups and incident response.

Before cross-border processing is activated, SalonePay records the permitted transfer mechanism, processing locations, local-residency requirements, partner responsibilities and customer disclosures. Data is not routed to a new country solely because that country appears in the global directory.

Offline instructions are signed, queued and reconciled when connectivity returns. Final settlement is not represented until central confirmation. SMS fallback must minimise personal data and use authenticated, expiring payloads.

Distance and trip evidence is used to calculate or substantiate a fare, prevent manipulation, reconcile payment and resolve a complaint. SalonePay records the evidence source and passenger acceptance. Precise location must be collected only when necessary, with the applicable permission, and retained for the approved legal, safety, fraud and dispute period.

Explainable models and constrained scoring may prioritize risk review, forecast merchant demand, identify reconciliation exceptions or rank already-eligible remittance routes. These outputs cannot bypass country or corridor controls, release money, close an account or change a merchant price. Customers may request human review where required by applicable law.

Subject to local law, customers may request access, correction, deletion, portability, account restriction or closure; object to or challenge certain processing; withdraw optional consent; complain about processing; and request review of a materially adverse automated recommendation. Financial, KYC, AML, sanctions and audit records may need to be retained under applicable law.

Privacy questions may be sent to privacy@salonepay.sl. Country-specific controller, representative, data-protection authority and complaint details are displayed when a market is activated. Material policy changes are communicated through the service and renewed consent is recorded when required.