MariPay is operated by Maripa Tech Agency, Kampala, Uganda. In this document, "we", "us" and "MariPay" mean Maripa Tech Agency and the MariPay platform; "you" means the person or business using it.
01Overview
Maripa Tech Agency ("we") runs MariPay. We are the data controller for the personal information of people who create MariPay accounts and visit our website. We handle personal information in line with Uganda's Data Protection and Privacy Act, 2019 and its regulations.
02What we collect
Information you give us
- Account details: your name, email address, phone number, business name and password (stored only as a one-way hash, never in readable form).
- Business verification: business registration details and, where we ask for them, identity documents and details of the owners or representatives of your business.
- Settlement bank account: bank name, account name and account number. The number is stored encrypted.
- Team members: the names and emails of people you invite, and the role you give them.
- Messages to us: what you write in the contact form, in emails or on WhatsApp. The on-site help assistant answers from the page in your browser and does not send what you type to us.
Information created when you use MariPay
- Transaction data: payments, refunds, payouts and settlements, with amounts, currencies, status, references, the mobile money number and network involved, and any customer details or metadata you send us through the API.
- Technical data: IP address, browser and device type, the times you sign in, active sessions, and security and audit logs of what was done on an account.
- Preferences: things like your light or dark theme and the test or live mode you last used.
Information from others
Our Payment Partners and mobile money operators tell us whether a payment succeeded or failed and give us related details such as the payer's network and a transaction reference.
03How we use it
- To provide the service: take and record payments, calculate balances and fees, make payouts and settlements, show you your dashboard and send you webhooks.
- To keep money and accounts safe: verify businesses, sign you in securely, detect fraud and misuse, and keep audit records. Our legal basis is both our legitimate interest in preventing fraud and our legal obligations.
- To contact you: sign-in codes, password resets, receipts, settlement and security notices, and replies to your messages. These are not marketing.
- To support the service: fix problems, answer your questions and keep the platform running reliably.
- To meet our legal duties: keep financial records, respond to lawful requests from regulators and law enforcement, and comply with anti-money-laundering rules.
We do not sell your personal information, and we do not use it to show you advertising.
05How we protect it
- Passwords are stored with a strong one-way hash. Bank account numbers and verification documents are stored encrypted.
- Connections to MariPay are encrypted in transit.
- Two-step verification, step-up re-checks for sensitive actions such as payouts, and an emailed code at sign-in that expires after 5 minutes.
- API keys are scoped, test and live data are kept separate, and webhooks are signed.
- Access by our own staff is limited by role, and sensitive actions are recorded in an audit log.
No system is perfectly secure. If a breach affects your personal information, we will tell you and the regulator as required by law.
06How long we keep it
We keep information for as long as your account is open and for as long afterwards as we need it to meet legal, tax, accounting and anti-fraud obligations, and to deal with disputes. Financial and transaction records are kept for the period the law and our Payment Partners require. When we no longer need information, we delete it or make it anonymous.
If a team member's account is deleted, their access and active sessions end, but records of financial activity and entries in our audit log may remain, without linking back to a working account.
07Your rights
Under the Data Protection and Privacy Act, 2019, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete information we no longer need, or stop using it in a particular way;
- stop processing for direct marketing (we do not send marketing without asking); and
- explain how an automated decision, such as a fraud check, affected you.
To use these rights, email maripatechagency@gmail.com from the address on your account. We may need to confirm who you are first, and we will answer within the time the law allows. Some information we are required to keep, and we will explain if that stops us doing what you ask.
09If you are a business's customer
If you pay a business through MariPay, that business decides why and how your details are used, and we process them for it to complete the payment, show it the result, and keep records. For questions about what a business does with your information, please contact the business. For how we handle it, contact us.
10Children
MariPay is for businesses and is not meant for anyone under 18. We do not knowingly collect information from children. If you think we have, tell us and we will delete it.
11Where data is processed
Our hosting and email providers may process information on servers outside Uganda. When that happens we take reasonable steps, such as contracts with the provider, to make sure your information is protected in line with the law.
12Changes to this policy
We will update this page when our practices change, and change the date at the top. For significant changes we will email you or show a notice in the dashboard. Please check back from time to time.
13Contact and complaints
Maripa Tech Agency, Kampala, Uganda
Email: maripatechagency@gmail.com
Phone / WhatsApp: +256 709 704128
If you are not happy with how we handled your information, please talk to us first. You also have the right to complain to Uganda's Personal Data Protection Office, which is part of the National Information Technology Authority (NITA-U).
See also our Terms of Service.
Questions about this document?
Write to us and a real person will reply. Please include the email address on your MariPay account.
maripatechagency@gmail.com