MH Pay Verifier Privacy Policy

Effective and last updated: 17 July 2026

MH Pay Verifier is operated by MH IT . This policy explains how the Android app handles information when merchants use automatic payment verification.

Information the app handles

• Recognized payment SMS: only new bKash, Nagad and Rocket Personal, Merchant or Agent transaction messages, including the sender, transaction message, message timestamp and detected SIM slot.
• Device connection details: device model, brand, Android version and API level, used to show whether the merchant's configured device is connected.
• Configuration: the webhook URL, allowed sender and forwarding settings entered by the user are stored locally on the device.

The app does not read existing SMS history. It filters out unrelated personal messages and OTP messages before forwarding. It does not access contacts, call logs, photos, location, microphone or advertising identifiers.

Why information is used

Recognized payment transaction data is sent over HTTPS to the MH PAY webhook chosen by the merchant to match a payment amount and transaction ID, prevent duplicate verification, maintain transaction records and diagnose delivery failures. Data is not used for advertising, profiling or sale.

Sharing and retention

Payment data is shared only with the merchant's configured MH PAY server and infrastructure providers needed to host that service. The merchant operating the MH PAY installation controls its transaction records and retention. Users may request access, correction or deletion from their merchant or by contacting us below, subject to legal and fraud-prevention retention requirements.

Data deletion requests

To request deletion, email support@mhpay.cc with the subject “MH Pay Verifier data deletion” and identify the MH PAY panel or merchant involved. We will verify the request and delete eligible app-related records, or explain any transaction records that must be retained for security, fraud prevention or legal compliance.

Permission, choice and security

The app shows a prominent explanation before requesting the Android RECEIVE_SMS permission. Forwarding starts only after the user also enables MH PAY in the app. Permission can be revoked at any time in Android Settings and forwarding can be switched off in the app. Data is sent using encrypted HTTPS connections; cleartext traffic and Android cloud/device-transfer backups are disabled.

Children

MH Pay Verifier is a merchant payment utility for adults and is not directed to children.

Contact

For privacy questions or data requests, email support@mhpay.cc.com or visit mhpay.cc.