Privacy notice

Who we are

Otsepay is run by Drifly Solutions OÜ (registry code 16527991, Maakri tänav 36, 10145 Tallinn, Estonia). We are the controller of the personal data described here. You can reach us at kontakt@driflysolutions.com.

What we collect

From businesses: the business name, contact email, mobile number, the email addresses of people who sign in, and the business’s Montonio API keys, which we store encrypted.

About people who pay: what the business enters for a payment request (amount, what it’s for, and optionally the customer’s first name and mobile), what a customer enters on a pay-button page (name and optionally mobile), and the payment’s status, time and method (bank or card).

We never receive card numbers or bank logins. Montonio handles the payment itself. The bank a customer picks for one-tap payments is remembered only on their own phone.

Why we use it

To run the service a business signs up for: creating payment requests, showing whether they are paid, and sending sign-in links and “paid” messages (contract).

To keep Otsepay secure and prevent misuse, for example by limiting how many payments can be started at once (legitimate interest).

To meet legal obligations, such as accounting and anti-fraud rules.

Who we share it with

Montonio Finance UAB, a payment institution licensed by the Bank of Lithuania, which starts and processes the payments.

Cloudflare, which hosts Otsepay; our database is kept in Cloudflare’s EU jurisdiction.

Resend, which sends our emails from its EU region.

Vonage, which sends our text messages (SMS).

We don’t sell personal data and don’t use it for advertising.

How long we keep it

Payment records are kept while the business uses Otsepay, and afterwards only as long as the law requires.

Sign-in links expire after 15 minutes. Sign-ups that are never confirmed are deleted after 7 days.

Cookies

Otsepay uses one cookie, to keep you signed in. There are no tracking or advertising cookies. Your phone may also remember your chosen bank, language and payment-sound setting; that stays on your device.

Your rights

You can ask to see, correct or delete your data, or object to how we use it, by emailing kontakt@driflysolutions.com. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).