This Privacy Policy describes how Viera Digital Platforms Pty Ltd (ABN 93 698 942 817) ("UniPay", "UniCash", "we", "us", "our") collects, uses, stores, and discloses personal information when you use the UniPay merchant platform, including the UniPay mobile app, UniPay web app, and UniPay Terminal and POS hardware (collectively, the "Service").
We operate the UniCash and UniPay platforms and are responsible for your personal information under this policy. The technology and intellectual property behind UniCash and UniPay are owned by our parent company, Viera Digital Pty Ltd (ABN 93 696 985 047).
We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information We Collect
Merchant account information
- Registered business name, trading name, and ABN or business registration number
- Business structure and registered business address
- Contact email address and mobile phone number
- Account PIN (stored as a one way hash; we cannot recover your PIN)
- Your chosen @handle within the platform
Business and identity verification (KYB)
Before you can use UniPay, you must complete business verification (Know Your Business, or KYB). KYB verifies both your business and the individuals associated with it. We collect and verify:
- Business registration details, confirmed against official registers
- The identity of directors, owners, and beneficial owners, including full legal name, date of birth, and residential address
- A government issued identity document (passport or driver's licence) for each individual we are required to verify
- A selfie/liveness check to confirm the verifying individual matches their identity document
As part of our fraud prevention and anti money laundering controls, we screen the business and its associated individuals against sanctions lists and other regulatory watchlists, and check directors against relevant regulatory registers.
Banking and payout information
- Nominated bank account details (BSB and account number) for AUD payouts
- Payout history and payout request records
Transaction and invoice data
- Payment amounts, timestamps, and account references
- Invoices generated via the UniPay app
- Payment confirmation records and payout history
- UniPay Terminal and POS device transaction logs
Technical data
- IP addresses and approximate geolocation (via Cloudflare)
- Device type, operating system, and browser
- App usage logs and error reports
- Session tokens and active device information
2. How We Use Your Information
- To create, verify, and manage your UniPay merchant account
- To complete business and identity verification (KYB) and screen against sanctions and regulatory watchlists, as part of our fraud prevention and anti money laundering controls
- To process UniCash payments received at your business and maintain accurate transaction records
- To deliver AUD bank payouts to your nominated bank account
- To generate and deliver invoices, payment confirmations, and payout receipts
- To operate and support UniPay Terminal and POS hardware registered to your account
- To send OTP codes for account verification and login
- To detect and prevent fraud, money laundering, and other illegal activity
- To respond to your merchant support requests
- To comply with our internal policies, risk controls, and any applicable legal requirements
3. Disclosure of Your Information
We do not sell your personal information. We may share it with:
- Amazon Web Services (AWS): for SMS delivery, email delivery, and secure data storage. AWS processes data in accordance with their privacy policy
- Cloudflare: for content delivery and network security. Cloudflare processes network level data in accordance with their privacy policy
- Identity and business verification providers: verification data is shared with our KYB, identity, and sanctions screening providers under strict data processing agreements
- Banking and payment partners: bank account details shared only as required to deliver your UniPay merchant payouts
- Accounting integrations (Xero, MYOB): if you connect an accounting integration, transaction data is shared with your chosen provider only with your explicit authorisation
We will not disclose your personal information to any other third party without your consent, except where required by applicable law.
4. Data Storage and Security
Your UniPay merchant data is hosted on secure servers located in Australia. We implement industry standard security measures including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Access controls and audit logging
- Regular security reviews and hardening
- Two factor authentication for all administrative access
- Encrypted, access controlled storage of identity and business verification documents
Some service providers (for example, SMS, email, and content delivery providers) may process limited data outside Australia. Where they do, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.
While we take reasonable steps to protect your information, no system is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme.
5. Data Retention
We retain your personal information for as long as your UniPay merchant account is active, and for seven (7) years following account closure, in line with our compliance and record keeping obligations.
Business and identity verification (KYB) documents are retained for seven (7) years from the date of collection or the end of the merchant relationship, whichever is later.
6. Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Ask how we collect, use, and disclose your personal information
- Make a complaint if you believe we have breached the APPs
To exercise these rights, contact us at [email protected].
Note: certain information may be required to be retained by law and cannot be deleted on request.
7. Cookies and Tracking
The UniPay web app uses browser local storage to keep you signed in. We do not use advertising cookies or tracking pixels. Cloudflare, our network security provider, may set an essential cookie to detect automated traffic.
8. Age Restriction
UniPay is available only to businesses and the individuals who operate them, and is restricted to persons aged 18 and over. Every account completes identity verification before it can be used, so we do not knowingly collect personal information from anyone under 18.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
For privacy related enquiries or complaints:
- Email: [email protected]
- Company: Viera Digital Platforms Pty Ltd (ABN 93 698 942 817)
- Country: Australia
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).