Privacy Policy
What personal and transaction data Flux collects and how it is managed.
This policy details how Flux collects, processes, and safeguards merchant identity, financial ledger entries, and transaction telemetry.
1. Information We Collect
When merchants register or integrate with Flux, we collect business verification data (including legal business name, representative details, NTN/CNIC information, settlement accounts) and API integration logs (including IP addresses, timestamps, and payment reference tokens).
2. Purpose of Processing
We process information strictly to execute online checkouts, reconcile instant disbursements, prevent fraud, satisfy anti-money laundering (AML) and know-your-customer (KYC) requirements, and maintain immutable financial ledger accounting.
3. Security & Encryption
All sensitive credentials, including upstream payment processor signing keys and webhook secrets, are encrypted using AES-256-GCM. We enforce TLS 1.3 in transit and cryptographic HMAC signatures for all automated webhook notifications.
4. Data Retention
Financial ledger records, dispute logs, and transaction audit trails are retained in accordance with financial regulatory compliance and statutory record-keeping periods. Raw authentication tokens are rotated and revoked per platform security controls.
5. Merchant Rights & Contacts
Merchants may access, review, and request updates to their registered identity and settlement information via the Flux Merchant Dashboard or by contacting compliance support.
Contact Compliance Team