Privacy Policy

KuvarPay ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our crypto-based payments platform, business dashboard, APIs, and related services (collectively, the "Services"). It is modeled around leading fintech standards and adapted for digital asset (crypto) payments.

Scope

This Policy applies to merchants, teams, customers, visitors, and integration partners using our Services. By accessing or using the Services, you acknowledge this Policy.

Information We Collect

• Account and Business Information: name, email, phone, password (hashed), business name, license or registration details, country, and team member data.
• Compliance and Identity: KYC/KYB data such as government IDs, proof of address, business documents, sanctions screening results, risk scoring, and verification status (processed via compliant vendors).
• Payment and Settlement: wallet addresses, on-chain transaction references, supported assets, settlement preferences, payout accounts, and reconciliation data.
• Technical and Usage: device information, log data (IP, user agent), cookies, analytics events, crash reports, and security telemetry (e.g., 2FA status, session state).
• Communications: support tickets, email content, notifications preferences, and marketing opt-ins.

How We Use Information

• Provide, maintain, and improve the Services, including crypto payment processing and settlements.
• Enable security features (2FA, device verification), fraud monitoring, and risk assessments.
• Perform KYC/KYB and AML/CFT checks using compliant third-party providers.
• Comply with legal obligations, industry standards, tax, and regulatory reporting.
• Communicate about account changes, product updates, and important notices.
• Support customer service and technical operations, including debugging and analytics.

Legal Bases

Where applicable (e.g., GDPR), we rely on legal bases including consent, contract performance, legitimate interests (service reliability and security), compliance with legal obligations, and protection of vital interests.

Sharing and Disclosure

• Service Providers: identity verification, analytics, cloud hosting, email delivery, customer support, blockchain infrastructure, and sanctions screening partners under appropriate safeguards.
• Compliance and Law Enforcement: disclosures required by law, court order, or regulatory authorities, and measures to prevent fraud, abuse, or illicit activities.
• Business Transfers: in connection with mergers, acquisitions, financing, or asset transfers, subject to continued protection of personal data.

International Transfers

We may process data across jurisdictions. When transferring personal data internationally, we implement appropriate safeguards (such as standard contractual clauses) and require equivalent protections from our processors.

Data Retention

We retain information for as long as necessary to provide the Services, meet legal and regulatory requirements, resolve disputes, and enforce agreements. Retention periods vary based on data type and applicable laws.

Security

We employ technical and organizational measures to safeguard information, including encryption, secure development practices, access controls, and monitoring. No system is perfectly secure, but we continuously improve our controls.

Your Rights

• Access, correct, or delete personal data, subject to verification and legal limits.
• Object to processing or request restriction where we rely on legitimate interests.
• Withdraw consent where applicable without affecting prior processing.
• Portability of data where technically feasible and legally required.

Cookies and Tracking

We use cookies and similar technologies to operate the Services and analyze usage. You can manage preferences via browser settings and in-product controls where available.

Children’s Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.

Contact Us

For privacy inquiries, data rights requests, or questions, contact our support team via the dashboard or email. We will respond within applicable regulatory timeframes.