Privacy Policy

1. Who is responsible

Tru Payout is the responsible party for personal information processed for its own business purposes. Where we process payment or customer information solely on a merchant's instructions, the merchant may be the responsible party and Tru Payout acts as its operator.

2. Information we process

• Identity and contact details, including names, email addresses, and telephone numbers.
• Merchant registration, ownership, KYC, settlement, and business information.
• Payment and transaction data, including references, amounts, payment methods, refunds, and settlement records.
• Account, authentication, access-control, device, browser, and security-event information.
• Support communications, preferences, consents, and website usage information.

Tru Payout does not intentionally store complete payment-card credentials where a payment provider securely collects and processes them.

3. Why we process information

We process personal information to:

• register and administer merchant accounts and authorised users;
• route, confirm, reconcile, refund, and settle payments;
• perform identity, compliance, fraud, risk, and security checks;
• provide support, service notices, reports, and requested communications;
• meet legal, regulatory, tax, accounting, and record-keeping obligations; and
• improve platform reliability, security, and merchant services.

Processing is based on consent where required, performance of a contract, compliance with law, protection of legitimate interests, or another justification permitted by the Protection of Personal Information Act 4 of 2013 (POPIA).

4. Sharing and cross-border processing

We may share information with payment service providers, banks, identity-verification providers, hosting and security suppliers, professional advisers, regulators, law enforcement, and other parties where required to provide the service or comply with law. We require operators to protect personal information and use it only for authorised purposes.

Where information is transferred outside South Africa, Tru Payout applies POPIA section 72 and uses an adequate legal basis, contractual safeguards, consent, or another permitted transfer mechanism.

5. Retention and protection

We retain information only for as long as required for the purpose collected, contractual obligations, dispute resolution, fraud prevention, and applicable legal or regulatory retention periods. Information is then securely deleted, destroyed, or de-identified.

We use reasonable technical and organisational safeguards appropriate to the nature and risk of the information. No internet service can guarantee absolute security.

6. Your rights

Subject to POPIA and other applicable law, you may request access to personal information, correction or deletion of inaccurate or unlawfully retained information, object to certain processing, withdraw consent, or complain to Tru Payout or the Information Regulator. We may need to verify your identity before completing a request.

7. Contact and complaints

Contact the Tru Payout Information Officer at hello@trupayout.com. You may also contact the South African Information Regulator through inforegulator.org.za.