OcsPay Logo

OcsPay

A payment verification solution by Onecodesoft

Privacy Policy

Last updated: April 16, 2026

1. Introduction

OcsPay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment automation solution, including our website, API services, and mobile applications.

By using OcsPay, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Account Information

When you create an account with OcsPay, we collect:

  • Name and username
  • Email address
  • Phone number
  • Password (encrypted and hashed)
  • API key (for service integration)
  • Website name and logo
  • Payment account numbers (bKash, Nagad, etc.)
  • Support link

2.2 Payment Transaction Data

When payments are processed through our system, we collect:

  • Sender information and phone numbers
  • Transaction IDs
  • Payment amounts
  • Payment provider information (bKash, Nagad, Rocket)
  • Transaction messages and timestamps
  • Payment verification status

2.3 Technical Information

We automatically collect certain technical information when you use our services:

  • IP addresses
  • Browser type and version
  • Device information
  • Usage patterns and access logs
  • API request and response data

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Provision: To provide, maintain, and improve our payment automation services
  • Payment Processing: To verify and process payment transactions
  • Authentication: To authenticate users and secure API access
  • Communication: To send service-related notifications and support responses
  • Security: To detect, prevent, and address technical issues and security threats
  • Compliance: To comply with legal obligations and enforce our terms
  • Analytics: To analyze usage patterns and improve our services

4. Data Security

We implement industry-standard security measures to protect your information:

  • All passwords are hashed using secure algorithms (bcrypt)
  • API keys are encrypted and stored securely
  • Payment data is encrypted in transit using HTTPS/TLS
  • Access to sensitive data is restricted to authorized personnel only
  • Regular security audits and updates
  • SHA256 hashing for UUID generation and verification

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist in operating our services (under strict confidentiality agreements)
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
  • Protection of Rights: To protect our rights, property, or safety, or that of our users

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Account information is retained while your account is active
  • Payment transaction data is retained for record-keeping and compliance purposes
  • Logs and technical data may be retained for security and analytics purposes

7. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request access to your personal data
  • Correction: Update or correct inaccurate information through your account settings
  • Deletion: Request deletion of your account and associated data
  • API Key Management: Regenerate or revoke your API keys at any time
  • Opt-Out: Unsubscribe from non-essential communications

To exercise these rights, please contact us through our support channels or use the settings available in your admin panel.

8. Third-Party Services

Our services integrate with third-party payment providers (bKash, Nagad, Rocket) and mobile platforms (Android, iPhone). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third-party services.

9. Children's Privacy

OcsPay is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. By using our services, you consent to the transfer of your information to these countries, which may have different data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: