Privacy Policy

What this policy covers

This Privacy Policy explains what account and identity data CryptoEze stores to run wallets and merchant payments, and how we use it.

Pakistan's Prevention of Electronic Crimes Act 2016 and the Electronic Transactions Ordinance 2002 apply to electronic systems and identity information used in Pakistan. This policy is a service notice. It is not a claim that a full data-protection statute is already in force, and it is not legal advice.

The operator of this service is CryptoEze, Pakistan. Local payment processing is provided through our licensed partner Volzix, Unit 6, First Floor, Kohinoor Plaza, Kohinoor City, Main Jaranwala Road, Faisalabad 38000, Pakistan. Privacy requests go through the Contact form on this website or Support inside your account.

Data we store

We store what we need to run the product.

Account: email, hashed password, country, public user id, phone if you give one, device sessions, authenticator enrolment state (not the secret in a recoverable form for you).

Wallets and money movement: ledger entries, invoices, payment links, deposits, sends, converts, Instant Payouts, PKR books where local rails are on. Amounts are integer minor units.

Merchant: legal name, trade name where given, website or app or social link, category, settlement preferences after approval, API keys (hashed or shown once), webhook deliveries.

KYC and merchant review. For a person: legal name as on the document, mobile number, date of birth, address, CNIC number and CNIC images (front and back), a selfie or liveness photo if asked. For a business: incorporation or NTN papers where the category requires them, a trade name, and any business licence we asked for. These files sit on private disk, not in public storage.

Support: tickets and attachments you send.

Legal: which documents you accepted, when, from which IP and user agent.

We do not sell account data.

Who can see it

Operators of CryptoEze can open KYC and merchant files for verification, fraud, support and settlement. They are not published on the website. A CNIC number may be used to find an account. When it is shown back to an operator it is masked. The customer-facing product does not display another person's CNIC.

If you apply for JazzCash, Easypaisa, QR or bank payouts, we may share the business and identity data the provider needs to review and activate you. We share for that purpose, not for advertising.

A paying customer who is not signed in does not receive your KYC file.

Why we use it

We use this data to operate accounts, match payments, prevent fraud, complete KYC or merchant review, talk to you in support, keep an audit trail, and meet legal requests we are required to answer.

We may use automated and manual review on transactions and documents.

How long we keep it

Ledger, invoice and acceptance records stay for as long as the account exists and for a period after closure so we can answer disputes, provider queries and legal duties.

KYC images and the CNIC number stay while the account is open. KYC records are kept for five years after the account closes, as anti-money-laundering rules require. Until that period is written here, we keep them for as long as a dispute, a provider query or a legal duty still needs them. We do not delete a ledger because a file aged out.

You may request a copy of your account records through support. We may refuse a request that would reveal another person's data, or that we must keep for fraud or law.

Cookies

See the Cookie Policy. We use a session cookie so you stay signed in, and a theme preference on your device. We do not run third-party advertising cookies.

International use

Crypto merchant accounts may be used from outside Pakistan. We still store the same operational data to run checkout, webhooks and the Business Wallet.

Contact

Use in-app support for privacy requests. Do not send identity documents to a public email thread if a private upload exists in the product.