Privacy Policy
Last updated: July 6, 2026
BOKT “AzFinans” MMC is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application and lending services.
Data We Collect
We collect the following categories of personal data: identification information (name, FIN code, date of birth), contact information (phone number, email, address), financial information (employment details, income data), biometric data (facial images for identity verification), photos of identity documents (ID card scans), device information (device ID, platform, push notification tokens), and usage data (app interactions, preferences).
Biometric Data
During the loan application process, we collect facial images through a liveness verification check to confirm your identity and prevent fraud. Your facial data is processed on our secure servers solely for identity matching against your submitted ID document. Biometric data is encrypted at rest, retained only for the duration required to complete verification, and is permanently deleted once the verification decision is made. We do not share your biometric data with any third parties.
Camera and Device Permissions
Our app requests camera access for two purposes: scanning your Azerbaijan ID card to extract identification details via optical character recognition (OCR), and recording a short liveness video for identity verification. Camera access is used only during these specific steps and is not used for any other purpose. We also request permission to send push notifications for payment reminders, loan status updates, and service communications. You can disable push notifications at any time through your device settings.
Government Service Integration
To verify your identity and process loan applications, we integrate with official Azerbaijan government services. SIMA (Azerbaijan digital identity service) is used for electronic contract signing. MyGov (Azerbaijan e-government portal) is used with your explicit consent to retrieve personal data required for credit assessment. Data exchanged with these services is transmitted securely and processed in accordance with Azerbaijan data protection law.
Phone Verification
We verify your phone number by sending a one-time password (OTP) via SMS through our telecommunications provider. Your phone number is used for authentication, account recovery, and service-related communications. We do not use your phone number for marketing purposes without your separate consent.
How We Use Your Data
Your data is used for identity verification and KYC compliance, credit assessment and loan processing, communication regarding your account and services, fraud prevention and security monitoring, compliance with legal and regulatory requirements, and improving our services and user experience.
Data Sharing
We may share your data with the Central Bank of Azerbaijan as required by regulation, credit bureaus for credit assessment purposes, payment processors (Epoint) for transaction processing, SMS providers for phone verification, law enforcement agencies when required by law, and our technology partners under strict data processing agreements. We do not sell your personal data. Biometric data is never shared with third parties.
Data Security
We implement industry-standard security measures including encryption of data in transit and at rest, access controls and authentication mechanisms, regular security audits and monitoring, and secure data center infrastructure.
Your Rights
Under applicable law, you have the right to access your personal data, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), withdraw consent for data processing, and lodge a complaint with the relevant supervisory authority.
Data Retention
We retain your personal data for the duration of your account relationship and for a period of 5 years following account closure, as required by financial regulations. Biometric data (facial images) is deleted immediately after the identity verification decision is made and is not retained long-term. Certain other data may be retained longer if required by law.
Contact Us
For questions about this Privacy Policy or to exercise your rights, please contact our Data Protection Officer at info@paypush.az.