Privacy Policy
1. Who holds your data
PlumePay, operated by Netser Group Holdings Limited, Hong Kong, is the controller of the personal data described here. Contact: [email protected].
2. What we store
| Category | What it is | Why |
|---|---|---|
| Account | Name, email, password (hashed), phone, country, city, address, business name and website | To identify you, contact you, and let you sign in |
| Transactions | Amounts, currencies, fees, counterparties, references, running balance | To move money and keep an auditable ledger |
| Orders | What was sold, the amount, and the payer's name and email if given | To take payment and let a merchant reconcile it |
| Payment methods | Card brand, last four digits, expiry, issuing country, and a token | To show you which card is which, and to charge it when you ask |
| Security | Sign-in times, IP addresses, browser and platform, activity log, active sessions | To detect misuse and let you see where your account is signed in |
| Invoices | Client name, email, address and line items you enter | To produce the invoices you create |
3. What we deliberately do not store
- Full card numbers. Card details are entered on our payment processor's own page and never reach PlumePay's servers. We hold a token and the last four digits.
- Security codes (CVV/CVC). Never collected, anywhere, at any point.
- Plaintext passwords. Passwords are stored only as a one-way hash and cannot be recovered, only reset.
4. Why we are allowed to hold it
- To perform our contract with you — account, transaction and payout data.
- To meet legal obligations — financial records, anti-money-laundering and tax requirements.
- Legitimate interests — fraud prevention, security logging and keeping the service working.
- Consent — optional marketing email, which you can turn off in settings at any time.
5. Who we share it with
We share only what is necessary, and never sell personal data:
- Our payment processor — to take payments and pay you out. They receive the payment details and the payer's email for the receipt.
- Your merchant, if you are a payer — the merchant whose payment link you used receives your name, email and what you paid for.
- Email delivery — the mail provider that sends account email on our behalf.
- Authorities — where we are legally required to, or to investigate fraud.
6. Where it is held
Data is held on servers in Hong Kong. Our payment processor and email provider may process data elsewhere; both operate under their own safeguards for international transfers.
7. How long we keep it
| Data | Kept for |
|---|---|
| Transaction and order records | 7 years, to meet financial record-keeping rules |
| Activity log | 24 months |
| Device sessions | Until you revoke them or they are replaced |
| One-time codes | 10 minutes, then unusable |
| Password reset links | 60 minutes, single use |
| Account details | Until you close the account, then only what we must keep |
Payment records cannot be deleted on request while that retention period applies — we are required to keep them.
8. Your rights
- Access. Download everything we hold about you as a file, from Settings → Privacy. No request needed.
- Correction. Change your details in Settings → Profile.
- Erasure. Ask us to close your account and delete what we are not required to keep.
- Objection and restriction. Ask us to stop or limit particular processing.
- Complaint. Contact us first; you may also complain to your data protection authority.
9. Cookies
We set one cookie, to keep you signed in. It is HTTP-only, restricted to this site, and marked secure over HTTPS. There is no advertising or third-party tracking on PlumePay. Our payment processor sets its own cookies on its checkout page, under its own policy.
10. Security
- All traffic is served over HTTPS.
- Passwords are hashed; secrets that must be readable are encrypted at rest.
- Every database query uses bound parameters, so submitted values cannot alter a query.
- Sessions are regenerated on sign-in, and every form submission is checked against forgery.
- Repeated failed sign-ins lock an account temporarily.
11. Children
PlumePay is not for under-18s and we do not knowingly hold their data.
12. Changes
Material changes to this policy will be notified to the email on your account before they take effect.