Privacy Policy

Palert ("Palert", "we", "us", "our") provides a payment alert service for businesses in the Maldives. It gives you instant, verified alerts on the Palert dashboard for incoming payments to your connected Bank of Maldives (BML) account.

This policy explains what information we collect when you use the Palert website, dashboard and app (together, the "Service"), why we collect it, how we protect it, and the choices you have. By using the Service you agree to this policy.

Palert is an independent service. We are not a bank, and we are not affiliated with, endorsed by, or acting on behalf of Bank of Maldives.

It is easier to trust a service when you know its limits, so we want to be explicit about what Palert does not have:

• We never have your internet banking username, password, PIN or one-time codes, for BML or any other bank.
• We cannot log in to your bank account, see your balance or statements, or move your money. The Service is technically incapable of doing so.
• We do not collect your customers' bank account numbers or banking credentials.
• We do not read the general contents of your phone. The Palert app only processes the information needed to detect incoming payments, nothing else on your device.

Account information. When you create an account we collect your email address and a password (stored only in hashed form, never readable by us), along with your business name and the BML account number and account name you choose to receive alerts for. We never ask for or collect your bank login credentials.

Staff accounts. When a business owner creates a login for a staff member, we store the username the owner chooses and an internal identifier. Staff accounts are created and controlled by the business owner.

Transaction data. To provide the Service, we collect and keep the details of incoming payments to your connected account. This typically includes the sender's name as shown by the bank, the amount, the receiving account, and the time of the payment. This is the core data the Service exists to process, and we retain it with us. By using the Service you agree to share this data with us, along with any other data we reasonably need to run the Service effectively.

Billing information. When you pay for your subscription by bank transfer, you upload an image of your transfer slip. We store the slip and the details read from it (such as reference number, amount and date) to verify and record your payment.

Referral data. If you arrive through a partner's referral link, the referral code is saved in your browser's local storage so the discount can be applied if you sign up, and the click is counted for the partner.

Technical data. Like most online services we receive basic technical information such as IP addresses, device and browser type, and logs of requests to our servers. Each device you set up for alerts also has a device key that ties it to your business.

• To provide the Service: detecting incoming payments to your connected account and showing them as alerts on your dashboard, playing payment sounds, and showing your payment history.
• To verify subscription payments you make to us and manage your billing.
• To operate staff access: letting owners create, manage and remove staff logins.
• To apply referral discounts and credit referral partners.
• To send service emails, such as account confirmation and important notices about your subscription.
• To provide support when you contact us.
• To keep the Service secure, prevent abuse, debug problems and improve reliability.

We do not sell your information. We do not use your transaction data for advertising, and we do not share it with anyone except as described in this policy.

We use a small number of service providers to run Palert. They process data on our behalf and only as needed to provide their service to us:

• Infrastructure providers that host the Service and store your account data and payment alerts.
• An email provider, which sends account and service emails to the address you signed up with.
• A provider that helps us read the transfer slips you upload for subscription payments so we can verify them.
• Telegram, if you choose to contact support through Telegram or enable Telegram alerts. Telegram's own privacy policy applies to your use of Telegram.

Within your business, alerts and payment history are visible to the accounts you authorise: the owner and any staff logins the owner creates.

We may disclose information if required to do so by law or a valid order of a competent authority, to protect the rights, safety or property of Palert or others, or as part of a merger, acquisition or sale of the business, in which case this policy will continue to apply to your data.

Our infrastructure providers may store and process data on servers located outside the Maldives. Wherever your data is processed, we apply the protections described in this policy and choose providers with strong security practices.

We keep your account information and payment alert history for as long as your account exists, so your business has a continuous record of its payments.

Billing records, including transfer slips, are kept for as long as needed for accounting and to resolve disputes about payments.

If you ask us to delete your account, we will delete or anonymise your personal data within a reasonable period, except for records we need to keep to comply with legal or accounting obligations, resolve disputes, or enforce our agreements.

Data sent between your devices, your browser and our servers is encrypted in transit using HTTPS. Access to production data is restricted, passwords are stored only in hashed form, and each business's data is separated so one customer can never see another customer's alerts.

No online service can guarantee absolute security. If we become aware of a breach affecting your personal data, we will do our best to resolve it.

• Access and correction: you can view and update your business details in the dashboard, or ask us for a copy of the personal data we hold about you.
• Deletion: you can ask us to delete your account and personal data, subject to the retention rules above.
• Stopping collection: removing the Palert app from your device stops any new transaction data being collected.
• Cancelling: you can stop your subscription at any time, and your data rights in this section survive cancellation.

To exercise any of these rights, contact us using the details at the end of this policy. We will respond within a reasonable time and may need to verify that you are the account owner first.

Staff logins are created by the business owner, who is responsible for having the staff member's agreement before creating an account in their name. Staff accounts see the business's payment alerts but cannot change billing or business settings. If you are a staff member and want your login removed, ask the business owner, or contact us and we will help.

Palert uses browser storage for things the Service needs to work: keeping you signed in, remembering your preferences (such as the alert sound setting), and holding a referral code if you arrived through a partner link.

We do not use third-party advertising cookies and we do not track you across other websites.

The Service is intended for businesses and their staff. It is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy at any time, without prior notice. It is your responsibility to review this policy regularly to stay informed of any changes. The date at the top shows when this policy was last revised, and continued use of the Service after a change takes effect means you accept the updated policy.