Privacy Policy

Last updated: 25 August 2026

Payment Pro Myanmar (“PProMM”, “we”, “us”) operates a payment receipt verification service at ppromm.com. This Privacy Policy explains what information we process, why, and the choices you have. It applies to merchants who connect their applications via our API, to staff who use the review console, and to any end users whose payment receipts are submitted for verification.

1. Information we process

Receipt images and extracted data. When a merchant submits a payment receipt, we receive the image and the expected payment details (amount, currency, receiver, external reference). Our AI extracts wallet name, amount, transaction ID, receiver and timestamp from the image to verify it.
Verification results. We store the verdict (approved, pending review, or rejected), confidence score, reason codes and extracted fields for each submission, for audit and billing purposes.
Account data. Staff email addresses and role assignments (admin, moderator). When you sign in with Google, Google shares your basic profile and email.
Usage and billing data. Verification counts, credit balances, plan assignments and an audit log of staff actions.
Technical data. API request metadata (timestamps, API key identifiers) and standard server logs for security and troubleshooting.

2. How we use information

To verify submitted payment receipts and return a verdict to the requesting merchant.
To operate the human review queue, where staff approve or reject uncertain receipts.
To calculate and enforce verification quotas and billing.
To secure the platform, detect fraud and abuse, and maintain an audit trail.
To provide account access and communicate with you about your account or service.

3. Legal basis for processing (GDPR)

We process personal data under the following lawful bases: performance of a contract with merchants (verification service and billing), our legitimate interests in securing the platform and preventing fraud, and compliance with legal obligations. End-user receipt data is processed on behalf of the submitting merchant, who is the controller for that data.

4. Data sharing

We share verification results only with the merchant who submitted the receipt, via the API response or signed webhooks to their callback URL. We use a third-party AI vision provider to analyse receipt images; that provider processes images on our behalf under a data processing agreement and does not retain them. We do not sell personal data. We may disclose data when required by law or to protect our rights.

5. Data retention

Receipt images and extracted data are retained for 90 days, then automatically deleted. Verification result summaries and audit logs are retained for the lifetime of the merchant account for billing and dispute resolution. Account data is deleted when an account is closed, subject to legal retention requirements.

6. Security

All data is encrypted in transit (TLS) and at rest. Access to staff accounts is protected by authentication. Role-based access controls limit who can view submissions and change settings. API keys are hashed and never displayed in full after creation.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to data portability. End users should direct requests to the merchant that submitted their receipt. Staff and merchants can contact us to exercise their rights regarding account data.

8. International transfers

Your information may be processed in countries other than your own, including where our infrastructure and AI providers operate. We rely on appropriate safeguards such as Standard Contractual Clauses for such transfers.

9. Children’s privacy

PProMM is not directed at children under 16, and we do not knowingly process their data.

10. Changes to this policy

We may update this policy from time to time. We will notify merchants of material changes and post the updated date above.

11. Contact

For privacy questions or requests, contact us at privacy@ppromm.com.