PalOption Privacy Policy
Last updated: September 19, 2026. How we protect and manage user personal information.
1. Information We Collect
We collect account registration details (full name, email address, phone number for M-Pesa deposits), government identity documents for KYC verification, and encrypted transaction metadata necessary to execute financial trading contracts.
2. Encryption & Security Standards
All client data, session tokens, and passwords are protected using industry-standard bcrypt hashing, 256-bit SSL encryption, and isolated database clusters. We never store raw M-Pesa PIN numbers or unencrypted financial credentials.
3. Third-Party Services & Webhooks
Payment data transmitted to Safaricom Daraja or GravityPay API is encrypted in transit via HMAC SHA-256 signatures for payment verification. We do not sell or trade user data to third-party marketing brokers.
4. Your Data Rights & Contact
You have the right to request a copy of your verified data or request account deletion by emailing our privacy compliance team at support@paloption.com.