Privacy notice

In effect from 15 October 2026.

Who is responsible

  • Gafat controls and processes the receipt data it keeps when it verifies a payment for you.
  • The service is for businesses in Ethiopia only.

What we keep

  • Your account: your email, your company name and what is needed to sign you in safely.
  • For each verification: the receipt the bank or wallet shows, the fields read from it, and a hash of the receipt.

How long

  • Raw receipts are deleted after 12 months.
  • The fields read from a receipt and its hash are kept after that, so one payment cannot be verified twice.

What you see

  • The payer's details on a receipt are shown to you only masked.