Privacy policy

Last updated October 2026

Template notice: this policy describes how the platform actually handles data. Have your legal advisor review it against your local data-protection rules before relying on it.

1. Data we collect

Account data: name, email, phone, country, hashed password.
Business data: business name, contact details and the review outcome.
Identity (KYC) data: document images and a selfie, when you complete verification.
Transaction data: card operations, funding, fees, balances and API request logs.
Technical data: IP address, device/browser and timestamps, for security and anti-fraud.

2. Why we use it

To provide the service: issuing cards, processing funding, charging fees, showing your history.
To verify identity where required by the card programme and by law.
To protect the platform: rate limiting, fraud detection, blocking abusive accounts and cards.
To meet legal and accounting obligations.

3. How KYC documents are protected

Identity documents and selfies are never publicly accessible. They are stored outside the public web area and served only to the account owner or to an authorised reviewer, over an authenticated route. Access is logged.

4. Sharing

We share the minimum necessary with regulated partners that actually issue cards or process funding, and with authorities where legally required. We do not sell personal data.

5. Retention

Transaction and accounting records are kept as long as the law requires. KYC records are kept while your account is open and for the statutory period after it closes. Fraud signals and audit logs are kept for security purposes.

6. Your rights

You can request access to, correction of, or deletion of your personal data (subject to legal retention obligations), and you can object to certain processing. Contact support from your panel.

7. Security

Credentials are stored hashed, secrets are shown only once when generated, private files are never web-served, and administrative actions are logged.