Card Payment Security (PCI DSS Notice)

1. What PCI DSS is

PCI DSS stands for Payment Card Industry Data Security Standard. It is a set of safety rules for any business that takes card payments. The rules protect your card number, expiry date and security code (CVV).

2. How card payments work on Kavopay

All card payments on Kavopay are made on the secure checkout of Flutterwave, our licensed payment partner. When you pay by card, you type your card details into the Flutterwave checkout window, not into a Kavopay form. Flutterwave handles and protects your card details under PCI DSS rules.

3. What Kavopay never does

• We never ask you to type your card number, expiry date or CVV on any Kavopay page or inside the Kavopay app.
• We never see your card details.
• We never store your card details on our servers, databases or devices.
• We never ask for your card PIN or card details by email, phone call, SMS or chat.

4. What we keep

After a payment, we only receive the result from Flutterwave, such as the transaction reference, the amount and whether the payment worked or failed. This helps us fund your wallet and show your history.

5. Other protections

• Our website and app talk to our servers over secure HTTPS connections.
• Access to our systems is limited to the people who need it.
• We watch for fraud and suspicious activity and can block it.

6. How to stay safe

• Only enter card details inside the Flutterwave checkout window.
• If any page or person asks for your card details in another way, do not give them and tell us.
• Never share your card PIN, CVV or one time codes with anyone.

7. Contact us

If you see anything suspicious or have a question about card safety, email [email protected]. For privacy questions, see our Privacy Policy.