Privacy Policy

OVGC ("we", "us", "our") is committed to protecting the privacy of the merchants and buyers who use our platform. This Policy describes the types of information we collect, how we use it, when we share it, and the rights you have over your personal data.

By using our Services, you confirm that you have read and understood this Policy. If you do not agree, please do not use our Services.

OVGC Payment Services FZ-LLC, a company registered in the United Arab Emirates with offices at Al Barsha Business Center, Al Barsha 1, Dubai, acts as the data controller for the personal information described in this Policy. For data protection enquiries, contact privacy@ovgcpayments.com.

Information You Provide

Information We Collect Automatically

Information from Third Parties

We may receive information from KYC/KYB verification providers, sanctions and PEP screening databases, fraud-detection partners, payment processors, banks, card networks, and government authorities — for the purpose of compliance, risk assessment, and fulfilling our regulatory obligations.

1. 1

   To deliver and operate the Services

   Process Transactions, authorise payments, settle funds to your bank or USDC wallet, generate invoices, and provide dashboard access.

2. 2

   To verify identity & comply with law

   KYC, KYB, AML, sanctions, PEP, and CTF checks; ongoing monitoring; and reporting to regulators where required.

3. 3

   To prevent fraud & abuse

   Risk scoring, chargeback detection, account-takeover prevention, and enforcement of our Acceptable Use Policy.

4. 4

   To improve the Services

   Analyse aggregated usage data, debug issues, and develop new features.

5. 5

   To communicate with you

   Send transactional messages (receipts, security alerts, account updates) and, where you have opted in, product news.

6. 6

   To resolve disputes & enforce agreements

   Investigate complaints, handle chargebacks, and protect our legal rights.

We rely on one or more of the following legal bases to process personal data:

We do not sell personal data. We share data only with parties that have a need to receive it for the purposes described in this Policy:

1. 1

   Service providers & sub-processors

   Payment processors, acquirers, KYC/KYB vendors, hosting providers, fraud detection partners, customer support tools — bound by written contracts requiring confidentiality and data protection.

2. 2

   Card networks & financial institutions

   Visa, Mastercard, American Express, banks, and clearing houses — for the purposes of authorising and settling transactions.

3. 3

   Regulators & law enforcement

   Where required by law, court order, or to protect our rights, property, or safety, or those of our merchants, buyers, or the public.

4. 4

   Corporate transactions

   In the event of a merger, acquisition, financing, or sale of assets, data may be transferred under suitable confidentiality protections.

Our infrastructure and certain processors may be located outside the United Arab Emirates, United Kingdom, or European Economic Area. Where we transfer personal data internationally, we put in place appropriate safeguards — such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement — to ensure your data is protected to a standard equivalent to the originating jurisdiction.

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. Typical retention periods include:

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include:

1. 1

   Encryption in transit (TLS 1.2+) and at rest (AES-256)

2. 2

   Role-based access controls, MFA, and least-privilege principles

3. 3

   Regular vulnerability scanning and penetration testing

4. 4

   Incident response procedures and security monitoring

5. 5

   Vendor due diligence and contractual data-protection obligations on all sub-processors

To exercise any of these rights, contact privacy@ovgcpayments.com. We will respond within 30 days, unless legally permitted to extend that period.

We use cookies and similar technologies to operate our website and dashboard, remember your preferences, and analyse usage. For details and to manage your preferences, see our Cookie Policy.

Our Services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the dashboard before the changes take effect. The "Last updated" date at the top of this page indicates the most recent version.

For questions or to exercise your rights, please contact our Data Protection team: