Privacy Policy — UniCash

This Privacy Policy describes how Viera Digital Pty Ltd (ABN 93 696 985 047) ("UniCash", "UniPay", "we", "us", "our") collects, uses, stores, and discloses personal information when you use the UniCash platform, including the UniCash mobile app, UniCash web app, UniPay mobile app, UniPay web app, and UniPay merchant portal (collectively, the "Service").

UniCash and UniPay are operated by Viera Digital Platforms Pty Ltd (ACN 698 942 817). We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

Account information

Mobile phone number (required for account creation and verification)
Email address (required for account access and identity verification)
@handle (your chosen username within the platform)
PIN (stored as a one-way hash — we cannot recover your PIN)

Identity verification (KYC)

All UniCash users complete a one-time full identity verification before accessing financial features. We collect:

Full name, date of birth, and residential address
Government-issued identity document (passport or driver's licence)
A selfie/liveness check for identity confirmation

UniPay merchant information

If you register as a UniPay merchant, we may additionally collect:

Business name and ABN or business registration number
Bank account details for payouts (BSB and account number)
Invoice and payment history via the UniPay merchant portal

Transaction data

Payment amounts, timestamps, and account references
UniPay invoice data: merchant-generated invoices, payment confirmations, and payout records
Transfer history within the UniCash platform

Technical data

IP addresses and approximate geolocation (via Cloudflare)
Device type and operating system
App usage logs and error reports
Session tokens and active device information

2. How We Use Your Information

To create and manage your UniCash and UniPay accounts
To verify your identity and comply with our internal risk‑management and fraud‑prevention requirements
To support the operation of the UniCash and UniPay platforms, including maintaining accurate transaction records
To enable UniPay merchants to accept payments, generate invoices, and receive bank payouts
To send OTP codes for account verification and login
To detect and prevent fraud and other illegal activity
To respond to support requests
To comply with our internal policies, risk controls, and any applicable legal requirements

3. Disclosure of Your Information

We do not sell your personal information. We may share your information with:

Amazon Web Services (AWS): For SMS delivery, email delivery, and S3 storage. AWS processes data in accordance with their privacy policy
Cloudflare: For content delivery and DDoS protection. Cloudflare processes network-level data in accordance with their privacy policy
Banking and payment partners: Bank account details shared only as required to deliver UniPay merchant payouts
KYC verification providers: Identity documents shared with our identity verification service provider under strict data processing agreements

We will not disclose your personal information to any other third party without your consent, except where required by applicable law.

4. Data Storage and Security

Your UniCash and UniPay data is stored on secure servers. We implement industry-standard security measures including:

Encryption in transit (TLS 1.2+) and at rest (AES-256)
Access controls and audit logging
Regular security reviews and hardening
Two-factor authentication for all administrative access

While we take reasonable steps to protect your information, no system is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme.

5. Data Retention

We retain your personal information for as long as your UniCash or UniPay account is active and for seven (7) years following account closure, in line with our internal compliance and record‑keeping requirements.

KYC documents are retained for seven (7) years from the date of collection or the end of the customer relationship, whichever is later.

6. Your Rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or outdated information
Make a complaint if you believe we have breached the APPs

To exercise these rights, contact us at [email protected].

Note: certain information may be required to be retained by law and cannot be deleted upon request.

7. Cookies and Tracking

The UniCash and UniPay web apps use browser local storage to maintain your session. We do not use third-party advertising cookies or tracking pixels. Cloudflare may set a security cookie (__cf_bm) for bot detection.

8. Children's Privacy

UniCash and UniPay are not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related enquiries or complaints:

Email: [email protected]
Company: Viera Digital Pty Ltd
Country: Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).