Privacy Policy

AliPay Digital Solution (ADS) ("we," "us," or "our") operates the AliPay Digital Solution mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our app. By using AliPay Digital Solution, you agree to the practices described herein.

1. Information We Collect

We collect the following categories of information:

2. How We Use Your Information

• To create and manage your account
• To verify your identity through KYC review
• To process and respond to your flight ticket requests
• To send OTP codes for phone number verification and login
• To send SMS and in-app notifications about your request status
• To prevent fraud, abuse, and unauthorized access
• To comply with legal obligations and regulatory requirements
• To improve our services based on aggregated usage analytics
• To communicate important service updates and announcements

3. Phone Number Verification & OTP

We collect and verify your phone number using One-Time Password (OTP) authentication. Your phone number is used as your primary account identifier. We send OTP codes via SMS through our SMS service provider (NestSMS). Your phone number may also be used to send transactional notifications related to your flight requests and KYC status.

4. KYC Information Handling

Identity information submitted during KYC verification is stored in a secure, encrypted database. Records are accessed only by authorized AliPay Digital Solution (ADS) staff for the purpose of identity verification. We do not share KYC information with third parties except as required by law. Records are retained for the duration of your account and for up to 5 years after account closure, as required by financial regulations.

5. Data Sharing & Third Parties

We may share your information with:

• SMS Service Providers (NestSMS): To deliver OTP and notification messages to your phone
• Database Providers (Supabase): To securely store your account and KYC information
• Flight agents and airlines: Flight request details necessary to fulfill your booking
• Law enforcement: When required by applicable law, court order, or government regulation
• Business successors: In the event of a merger, acquisition, or sale of assets

We do not sell your personal data to any third party for marketing purposes.

6. Data Security

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for data at rest
• JWT-based authentication with secure token management
• Role-based access controls — KYC documents are only accessible to verified admin staff
• Regular security audits and vulnerability assessments
• Secure deletion procedures for account data upon request

7. Push & SMS Notifications

We send the following types of notifications:

• OTP codes for authentication (SMS)
• KYC status updates — approved, rejected, or re-upload required (SMS + in-app)
• Flight request status updates — pricing, confirmation (SMS + in-app)
• Service announcements and important account alerts (in-app)

You may disable in-app notifications in your device settings. SMS notifications for account security (OTP) cannot be disabled as they are essential for account access.

8. Data Retention

• Account data: Retained for the duration of your account plus 3 years after deletion
• KYC documents: Retained for up to 5 years after account closure
• Flight request history: Retained for 3 years
• SMS logs: Retained for 1 year
• Usage analytics: Retained for 2 years in anonymized form

9. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Restriction: Request that we limit processing of your data
• Objection: Object to processing for certain purposes

To exercise any of these rights, contact us at: support@alipaydigitalsolution.com

10. Children's Privacy

AliPay Digital Solution is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification and/or SMS. Your continued use of the app after changes take effect constitutes your acceptance of the updated policy.