Privacy Policy

Last updated: June 5, 2026

BuyNau (“we”, “us”, or “our”), operated by Synterra Limited, provides a salary-linked loan and credit service to employees of partner employers. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the BuyNau mobile app or the BuyNau admin website.

1. Information We Collect

We collect the following categories of information about you:

Identity and contact: full name, email, phone number, residential address.
Employment: employer / company name, employee ID, monthly net pay.
Identification documents: National ID, driver’s license, passport, employee ID, employee confirmation letter, and similar documents you upload to verify your identity and employment.
Financial: bank account details and card details used to receive loan disbursements. Payslips and Personal Vehicle Allowance (PVA) records where applicable.
Loan activity: loan amounts, status, repayment history, missed payments, credit limit tier.
Authentication: hashed password, biometric-enabled flag (we do not store the biometric data itself; it stays on your device), and session tokens.
Device and usage: app version, device type, in-app actions used to operate the service.

2. How We Use Your Information

To provide and operate the BuyNau loan service, including processing applications, disbursements, and repayments.
To verify your identity and employment, including by contacting your employer’s HR department.
To assess your creditworthiness and determine your eligible loan tier and credit limit.
To send transactional notifications (loan status updates, repayment reminders, password resets).
To prevent fraud, comply with applicable law, and enforce our terms.
To improve the product based on aggregated usage patterns.

3. Information Sharing

We share your information only as described below:

Your employer: we may share loan application status, salary verification requests, and repayment confirmations with your employer’s HR contact for the purpose of verifying employment and arranging payroll-linked repayment.
Service providers: we use third-party processors that operate under contracts that require them to protect your information. These include cloud hosting (Render), file storage (Supabase), and email delivery (Synterra mail infrastructure).
Legal and safety: we may disclose information if required by law, court order, or to prevent fraud, harm, or illegal activity.

We do not sell your personal information.

4. Data Storage and Security

Your data is stored on cloud infrastructure in the Asia-Pacific region. Passwords are hashed using industry-standard bcrypt. Communications between the app and our servers are encrypted using TLS. Uploaded identification documents are stored in a private object store that requires authenticated access. We restrict access to personal data to authorized BuyNau and Synterra personnel who need it to operate the service.

No system is perfectly secure. While we take reasonable measures to protect your data, you should also keep your account password and device access protected.

5. Data Retention

We retain your account information for as long as your account is active. After you close your account, we keep loan, repayment, and identity records for the period required to comply with applicable financial-services and anti-fraud laws in Papua New Guinea, after which we securely delete or anonymize them.

6. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at the email or phone number below. We will respond within a reasonable time. Note that some information must be retained to comply with law (for example, records of active loans).

7. Children

BuyNau is not directed at, and we do not knowingly collect information from, persons under 18 years of age. If we learn we have collected information from a minor, we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If the changes are material, we will notify you in the app.

9. Contact Us

For privacy-related questions or requests, contact us at:

Email: supportbuynau@synterra.com.pg