Legal

Privacy Policy

Last updated: August 2026

Privacy Overview: We collect personal details and verification documents solely to fulfill legal compliance requirements, process secure transactions, and manage your multi-currency accounts. All sensitive identity files are encrypted and processed in accredited security environments.

1. Information We Collect

Account Credentials: Full legal name, verified email address, phone number, and cryptographically hashed passwords.
Identity & KYC Information: Residential address, date of birth, national identity/tax ID numbers, and official government identification documents (passports, driver's licenses, proof of address, biometric verification selfies).
Financial & Transaction Data: External bank account numbers, linked card details, transaction history, currency exchange records, and multi-currency virtual account activity.
Technical & Location Data: IP address, device fingerprints, browser characteristics, and geolocation data utilized strictly for fraud prevention and security monitoring.

2. Data Protection Safeguards

We do not sell, rent, or trade your personal or financial information to third parties or advertisers.
Uploaded identity files are protected using end-to-end encryption in transit (TLS 1.3) and at rest (AES-256) inside SOC 2 Type II compliant storage infrastructure.
Access to sensitive compliance data is strictly governed by zero-trust role-based access controls and monitored via continuous audit logging.

3. How We Use Your Information

To verify your identity and satisfy regulatory Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
To execute global bank transfers, multi-currency balance management, and real-time foreign exchange trades.
To send critical account notifications, security alerts, and transaction confirmations.
To detect, prevent, and mitigate fraud, unauthorized account access, and financial crime.

4. Third-Party Service Integrations

Provider / Infrastructure	Function & Purpose
Regulated Banking Partners	Facilitates tier-1 multi-currency clearing accounts, domestic transfer rails, and safeguarded client fund holding.
KYC / Identity Verifiers	Automates identity checks against global sanctions lists and official identification document databases.
Transaction Security Systems	Monitors real-time payment transactions for fraud detection and risk prevention.
Transactional Email Infrastructure	Delivers multi-factor authentication codes, security notices, and transaction receipts.

5. Cookies & Tracking Technologies

We utilize essential, security-focused cookies and token sessions to maintain secure logins, preserve active user sessions, and recognize authorized devices. We do not employ cross-site tracking cookies or third-party advertising scripts.

6. Your Data Rights & Retention

We retain account and transaction records in compliance with applicable financial retention mandates (typically 5 to 7 years post-account closure depending on jurisdiction). Under applicable privacy laws (such as GDPR and CCPA), you may request access to, correction of, or deletion of your personal data by contacting our Data Protection Officer.

7. Policy Amendments

This Privacy Policy may be updated periodically to reflect evolving legal, regulatory, or operational standards. Notice of significant revisions will be communicated via email or primary account notifications prior to implementation.

8. Contact Privacy Team

For questions regarding data privacy rights, regulatory inquiries, or data requests, contact privacy@allpaybridge.com.