Privacy policy

1. Who we are

Taco Pay is a technology platform for creating and managing prepaid virtual cards for online payments. We are not a bank. Some parts of the service, such as card issuance, identity verification and payment processing, are provided by third-party providers, who receive the data they need to do so.

2. Data we collect

• Account details: your name, email address, phone number, date of birth, address and password. Passwords are stored in hashed form, never in plain text.
• Identity verification: images of your identity document and a selfie, processed by our identity verification provider to confirm that you are who you say you are.
• Top-ups: the amounts, method and status of each top-up; for agent top-ups, the proof of payment you upload with the sender's name and number; for USDT, the transaction details.
• Cards and transactions: the cards you hold, their balances and the transactions made with them, as provided by the card provider.
• Technical data: information such as your IP address, device and browser, used to keep the service secure and working.
• Messages: what you send us when you contact support.

3. How we use your data

• to create and run your account, issue and manage your cards and process your top-ups;
• to verify your identity and prevent fraud and misuse;
• to send you one-time codes, notifications about your account and service messages;
• to answer your requests and provide support;
• to meet our legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who we share it with

We share personal data only when it is needed to provide the service or required by law:

• Third-party providers that issue cards, verify identity, send emails and notifications, and host our systems, each receiving only what they need for their part of the service;
• Authorities, when we are legally required to.

5. How we protect it

We use measures appropriate to the service, including encrypted connections (HTTPS), hashed passwords, a one-time code sent to your email at every sign-in, and a further code before full card details are shown. No system is completely secure, so please also keep your password and codes private.

6. How long we keep it

We keep your data while your account is open and, after it is closed, for as long as we need it to meet legal obligations, resolve disputes or prevent fraud. After that, we delete or anonymise it.

7. Your rights

You can ask us to access, correct or delete your personal data, or to restrict or object to how we use it. Some data may have to be kept for legal reasons even if you ask us to delete it. To make a request, contact us using the details below.

8. Cookies and local storage

This website does not use advertising or tracking cookies. It loads fonts from Google Fonts, which receives your IP address when the fonts are downloaded. The Taco Pay app uses essential browser storage to keep you signed in and remember your language.

9. Changes to this policy

We may update this policy from time to time. We will publish the new version on this page with a new date.