This policy explains how SkyPay collects, uses and protects personal information in accordance with the Australian Privacy Act 1988 (Cth) and, where applicable, the GDPR and other regional laws.

What we collect

Account details (name, email), business details provided at onboarding, transaction data (amounts, product, buyer email), technical data (IP address, user agent, request ids) and support correspondence. We do not collect or store card numbers; those are handled by the payment provider.

Why we collect it

To operate the service, prevent fraud and abuse, meet legal and provider obligations, and provide support.

Retention

Financial records are retained for at least 7 years as required by Australian law. API request logs are kept for 30 days, webhook events and deliveries for 90 days, audit logs for 7 years.

Your rights

[Placeholder — access, correction, deletion and complaint handling procedures to be finalised with counsel.]