Privacy Policy

Effective Date: January 1, 2025

Kapitro (“Kapitro”, “we”, “our”, “us”) operates a global digital banking platform. This Privacy Policy describes how we collect, use, store, process, disclose, and protect personal data when you access or use our services.

1. Scope of This Policy

This policy applies to all users, visitors, customers, account holders, and representatives interacting with Kapitro through our website, mobile applications, APIs, and related services.

2. Categories of Personal Data Collected

2.1 Identification & KYC Data

• Full legal name
• Date and place of birth
• Nationality and residency status
• Government-issued identification documents
• Biometric verification data (where legally permitted)

2.2 Financial & Transactional Data

• Account numbers and balances
• Transaction records and payment instructions
• Funding sources and beneficiary details

2.3 Technical & Usage Data

• IP address and device identifiers
• Operating system and browser type
• Login timestamps and activity logs

2.4 Communications

• Support tickets and correspondence
• Recorded communications where permitted by law

3. Purposes of Processing

Your data is processed strictly for legitimate and lawful purposes, including:

• Account creation, identity verification, and onboarding
• Execution and settlement of financial transactions
• Fraud detection, AML, CTF, and sanctions screening
• Regulatory reporting and audit obligations
• System security, monitoring, and performance optimization

4. Legal Basis for Processing

• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests
• User consent where required

5. Data Sharing & Third Parties

We may disclose data to regulated third parties strictly on a need-to-know basis:

• Payment processors and banking partners
• Identity verification and compliance providers
• Regulatory, tax, and law enforcement authorities

6. International Data Transfers

Data may be processed outside your country of residence. We apply contractual, technical, and organizational safeguards consistent with international data protection standards.

7. Data Retention

Personal data is retained only for the duration required by applicable laws, regulatory mandates, and operational necessity.

8. Your Rights

• Access and correction
• Restriction or objection to processing
• Data portability
• Deletion where legally permissible

9. Security Measures

We employ encryption, role-based access controls, monitoring, incident response, and periodic security audits to protect user data.

10. Changes to This Policy

We may update this policy periodically. Material changes will be communicated through official channels.

11. Contact

Privacy inquiries: privacy@kapitro.com