Privacy Policy

This policy explains what Sam Software Co Ltd ("Samsoftpay", Kampala, Uganda) collects when you use our payment services, and why.

What we collect

From merchants: business name, email, phone number, and the verification (KYC) documents required to move live money — company registration, director identification and settlement account details.
From paying customers: the mobile-money phone number used to pay, an optional email address for receipts, and the transaction details themselves (amount, time, status). We never see or store mobile-money PINs — customers approve payments on their own phone.

Why we collect it

To process the payment you asked us to process, to meet our legal record-keeping and anti-money-laundering obligations in Uganda, to prevent fraud, and to support you when something goes wrong. We do not sell personal data, and we do not use customer data for advertising.

Who we share it with

The mobile-money network processing the payment (e.g. MTN Uganda), our infrastructure providers (hosting, database), and authorities where the law requires it. The merchant you paid can see the transaction details needed to serve you (phone number, amount, status).

How long we keep it

Transaction records are retained as required by Ugandan financial record-keeping law. Operational data such as delivered webhooks and expired idempotency keys is deleted after 30 days.

Security

API keys are stored hashed; webhooks are HMAC-signed; test money and live money are kept on separate ledgers; access to production systems is restricted. Payment pages are served only over HTTPS.

Your rights & contact

To ask what we hold about you, correct it, or request deletion (subject to the retention law above), contact samsoftware75@gmail.com · Tel/WhatsApp +256 783 647260. We respond within two business days.