Privacy, made clear.

Depending on the Services you use, we may collect the following categories of information:

Account Information

• Full name
• Phone number
• Email address
• Username
• Date of birth, where required
• Account credentials and security information
• Profile information

Identity Verification Information

Where verification is required, we may collect information necessary to verify your identity, including:

• National identification information
• Identification documents
• Date of birth
• Selfie or verification photographs
• Other information required for identity verification and compliance purposes

We only request information necessary for the applicable verification process.

Transaction and Financial Information

• Deposit and withdrawal information
• Payment and transfer details
• Transaction amounts, dates, and references
• Recipient, sender, and merchant information
• Wallet balance and transaction history
• Payment method or channel information

Where payments are processed through third-party payment providers, relevant information may also be processed by those providers according to their own privacy policies.

Device, Location, and Communications

We may automatically collect device type and model, operating system and version, app version, IP address, device identifiers, network information, crash reports, logs, and security and fraud-prevention information. Where required for a specific feature and permitted by your device settings, we may collect approximate or precise location information. If you contact us, we may also collect your name, contact information, support requests, messages, and issue reports.

• Create and manage your ShapeSA account
• Provide wallet, payment, merchant, and business services
• Process deposits, withdrawals, transfers, payments, and payment links
• Verify your identity and prevent fraud or unauthorized transactions
• Provide supported airtime, data, bill-payment, savings, and eligible loan-related services
• Send transaction and security notifications
• Provide customer support and improve our Services
• Monitor reliability and meet legal, regulatory, accounting, and compliance requirements
• Detect, investigate, and prevent fraud, abuse, or illegal activity

We do not sell your personal information. We may share or disclose information when reasonably necessary to provide our Services or comply with applicable requirements.

Service Providers

Trusted third-party providers that help us operate our Services, such as payment processors, mobile money and banking partners, identity verification providers, cloud hosting providers, security and fraud-prevention providers, analytics and technical service providers, and customer support providers.

Merchants, Authorities, and Business Transfers

Where necessary to complete a transaction, information may be shared with the relevant merchant, recipient, sender, or payment partner. We may disclose information where required or permitted by law, regulation, legal process, court order, or lawful request. If ShapeSA or part of its business is involved in a merger, acquisition, restructuring, financing, or sale of assets, relevant information may be transferred subject to applicable privacy requirements.

ShapeSA may use third-party payment and financial service providers to process transactions. We may not directly store certain sensitive payment credentials where processing is handled by third-party providers. Payment providers may independently process information according to their own terms and privacy policies.

Our website may use cookies and similar technologies to operate the website, maintain security, remember preferences, understand website usage, and improve our Services. You may be able to control cookies through your browser settings.

We take reasonable technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, loss, or misuse.

• Encrypted communications
• Secure authentication
• PIN and account security controls
• Access controls and identity verification
• Transaction monitoring and fraud detection
• Security logging and monitoring

However, no electronic system or method of transmission can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary to provide our Services, maintain your account, complete transactions, prevent fraud and abuse, resolve disputes, maintain business and security records, and meet legal, regulatory, tax, accounting, or compliance obligations. When information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable requirements.

Depending on applicable law, you may have rights regarding your personal information, including the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Request information about how your data is processed
• Withdraw certain permissions
• Object to or restrict certain processing where applicable
• Request a copy of certain information

Some requests may be subject to legal, regulatory, security, or transaction-retention requirements. To exercise applicable privacy rights, contact us using the information provided below.

You may request deletion of your ShapeSA account and associated personal information by contacting ShapeSA Support. Certain information may need to be retained for a period of time where required for legal, regulatory, fraud-prevention, security, accounting, dispute-resolution, or transaction-record purposes. After the applicable retention period, retained information will be deleted or anonymized where reasonably possible.

ShapeSA is not intended for children who are not legally permitted to use financial or payment services. We do not knowingly collect personal information from children in violation of applicable laws. If you believe a child has provided personal information to ShapeSA without appropriate authorization, please contact us.

ShapeSA may integrate with third-party services, payment providers, financial institutions, identity verification services, analytics providers, and other service providers. When you use a third-party service through ShapeSA, that provider may process information according to its own privacy policy and terms. We encourage users to review the privacy policies of relevant third-party providers.

Depending on the service providers we use, your information may be processed or stored in countries other than the country in which you live. Where required, we will take reasonable measures to ensure that applicable privacy and data-protection requirements are respected.

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements, or business practices. When we make material changes, we may provide appropriate notice through the ShapeSA application, website, email, or other available communication channels. The “Last Updated” date at the top indicates when it was most recently updated.

We will review and respond to privacy-related requests within a reasonable period and in accordance with applicable requirements.