Legal
Privacy Policy
The complete policy is being finalized. The principles below already govern how PayAll handles personal and biometric data.
Biometric data governance
- Explicit consent is collected at enrollment; palm authentication is strictly opt-in.
- Purpose limitation — biometric templates are used for payment authentication only, never for marketing or profiling.
- Raw palm images are discarded immediately after feature extraction; only encrypted, irreversible templates are retained.
- Right to deletion — templates are deleted within 30 days of account closure.
- Templates are stored in jurisdiction-local, HSM-backed vaults and are not transferred across borders.
PayAll Pty Ltd operates under Australian corporate governance, the Privacy Act 1988, and Australian AML/CTF obligations. Questions: info@payalldigital.com