top of page

Privacy Policy

Scope

This policy explains how we collect, use, share, and protect personal data when you visit [your domain], use our products, contact support, or interact with our marketing.

What information we collect

We collect the following categories of data (depending on your use of our services):

  • Account & contact data: name, email, phone, company, role, country.

  • KYC/KYB & compliance data (for regulated clients): identity documents, liveness/biometric checks (pass/fail + confidence scores, not raw video unless you choose to store it), proof of address, source-of-funds, date of birth, nationality, beneficial ownership, adverse media/PEP/sanctions match results.

  • Transaction & operational data: transfer amounts, currencies, corridors, payout method, partner identifiers, approvals/flags, case notes, audit trail.

  • Technical data: IP address, device/browser info, settings, cookies, usage logs, API keys/IDs.

  • Support & communications: messages, attachments, feedback, incident reports.

  • Marketing preferences: newsletter opt-in/opt-out, campaign attribution.

How we collect information

  • Directly from you when you sign up, request a demo, use our products, or contact us.

  • Automatically via cookies, SDKs, and logs when you browse our site or apps.

  • From third parties such as identity verification providers, sanctions/PEP databases, payment partners, analytics platforms, or your employer if they provision an account for you.

Why we use your information (legal bases)

Under UK/EU GDPR, we process personal data on these bases:

  • To perform a contract (Art. 6(1)(b)): creating accounts, providing the service, support.

  • To comply with legal obligations (Art. 6(1)(c)): KYC/KYB, AML monitoring, sanctions screening, record keeping, regulator requests.

  • Legitimate interests (Art. 6(1)(f)): product security, fraud prevention, service analytics, improving features, safeguarding our users and platform.

  • Consent (Art. 6(1)(a)): marketing emails, non-essential cookies, certain optional features. You can withdraw consent at any time.

How we use your information

  • Provide and operate RemittanceOS, including identity verification, AML monitoring, payout routing, analytics, and reporting.

  • Configure policies, rules, and case workflows; generate audit trails and regulator-ready exports.

  • Secure accounts, prevent abuse, and investigate incidents.

  • Communicate about updates, service notices, and support.

  • Improve the platform through anonymised/aggregated analytics.

Cookies & similar technologies

We use essential cookies (for security, login, core functionality) and optional analytics cookies (to understand usage and improve the product). You can manage preferences in our cookie banner or your browser settings. See [Link to Cookie Policy] for details.

Sharing your information

We do not sell personal data. We share it only with:

  • Processors that help us run the service (cloud hosting, email, analytics, identity/screening providers, payment partners).

  • Partners you choose to connect (e.g., bank/wallet/cash payout providers).

  • Professional advisors (legal, compliance, auditors).

  • Authorities when required by law or to protect rights, users, or the platform.

We sign data processing agreements with processors. A current list of key processors is available on request or at [Processors URL].

International transfers

If data leaves the UK/EU, we use appropriate safeguards such as UK/EU Standard Contractual Clauses, UK addendum, and additional measures as needed. Details available on request.

Security

We use industry-standard measures including encryption in transit/at rest, role-based access (RBAC), SSO/2FA options, IP allow-listing, key rotation, and immutable audit logs. No method is 100% secure, but we continuously improve our controls.

bottom of page