Privacy Policy

Effective date: 30 October 2026

CF Pay ("we", "us") is a service operated by Vientiane Street Company Limited, Ban Dongkoy, Sisattanak District, Vientiane Capital, Lao PDR. CF Pay helps online sellers ("Merchants") take orders from comments on Facebook live videos, send bills through Messenger, and verify bank-transfer slips. This policy explains what information we process for Merchants and for the people who buy from them ("Customers").

1. Information we collect

From Merchants

• Account details: name, email, phone number, shop name.
• Facebook Page details you connect: Page ID, Page name, and a Page access token granted through Facebook Login.
• Shop settings: products, prices, stock, and the bank account name/number or payment QR you choose to show to Customers.

From Customers, through the Merchant's Facebook Page

• Comments posted on the Merchant's live videos and posts (for example "CF A01"), with the commenter's name and Facebook-provided ID.
• Messages sent to the Merchant's Page on Messenger, including images such as payment slips.
• Information read from payment slips: amount, date/time, sender and receiver account names, bank, and reference number.
• Delivery details the Customer provides: name, phone number, address.

2. How we use information

• To detect order comments, reserve stock, and create orders for the Merchant.
• To send bills, payment instructions, order confirmations and delivery updates to Customers on Messenger on the Merchant's behalf.
• To check payment slips (amount match, receiving account, duplicate slips) and update order status.
• To provide reports to the Merchant, give support, prevent fraud, and keep the service secure.

We do not sell personal information and do not use Customer data for advertising.

3. Facebook Platform data

We access Facebook and Messenger data only through Meta's official APIs and only with permissions the Merchant grants. We use this data solely to provide the features described above, and we comply with the Meta Platform Terms and Developer Policies.

4. Sharing

• The Merchant: order, payment and delivery information about a Customer is shared with the Merchant the Customer is buying from.
• Service providers that host our servers and database, under confidentiality obligations.
• Delivery partners, only when the Merchant enables shipping, to create and track shipments.
• Authorities, when required by the laws of the Lao PDR.

5. Retention

We keep order and payment records for as long as the Merchant's account is active and as needed for accounting and dispute handling, normally no longer than 24 months. Page access tokens are deleted when a Merchant disconnects their Page or removes the app.

6. Security

Data is transmitted over HTTPS. Access tokens are stored encrypted and are never shown in the browser. Access to data is limited to staff who need it to run the service.

7. Your choices and rights

• Merchants can disconnect their Facebook Page at any time in CF Pay or in Facebook Settings › Business Integrations.
• Anyone can ask to access, correct, or delete their data. See our Data Deletion instructions.

8. Children

CF Pay is a business tool and is not directed to children under 18.

9. Changes

We may update this policy. We will change the effective date above and, for significant changes, notify Merchants.

10. Contact

Vientiane Street Company Limited (CF Pay)
Ban Dongkoy, Sisattanak District, Vientiane Capital, Lao PDR
Email: cfpay789@gmail.com · Phone: +856 20 9534 9740
Facebook: facebook.com/cfpay