Skip to main content
VeltaFi

Legal

Privacy Policy

Effective date: March 1, 2026. This policy describes how VeltaFi collects, uses, stores, and protects your information.

Back to Legal

1. Data Collection Practices

We collect the following categories of information:

  • Business information: Legal name, country of incorporation, industry codes, business vertical, and registration documents provided during onboarding.
  • Beneficial owner information: Names, dates of birth, nationality, and ownership percentages of individuals who control 25% or more of the business.
  • Account information: Email addresses, team member details, role assignments, and authentication credentials.
  • Transaction data: Deposit and withdrawal records, credit facility usage, payout destination details, and audit log entries.
  • Usage data: Page views, feature interactions, session duration, browser type, IP address, and device information collected via analytics.

2. How We Use Your Data

We use collected data to: (a) provide and operate the treasury management platform; (b) verify business identity and comply with KYB/AML/KYC requirements; (c) process transactions and execute treasury operations; (d) monitor risk and enforce policy controls; (e) send transactional notifications and service updates; (f) improve platform reliability, performance, and user experience; (g) respond to support requests and legal obligations.

3. Data Sharing

We do not sell your personal or business data to third parties. We may share data with: (a) financial infrastructure providers necessary to execute transactions; (b) compliance and identity verification services; (c) cloud infrastructure providers that host the platform; (d) legal authorities when required by law, regulation, or valid legal process. All third-party processors are bound by data processing agreements that require equivalent protection of your data.

4. Data Retention and Deletion

Transaction records and compliance data are retained for a minimum of seven (7) years as required by financial regulations. Account and profile data are deleted within ninety (90) days of account closure, except where longer retention is legally required. Usage analytics data is retained in aggregated, anonymized form and is not subject to deletion requests.

5. Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of the data we hold about your account.
  • Export: Download your data in a machine-readable format.
  • Correction: Update inaccurate or incomplete information.
  • Deletion: Request deletion of your data, subject to legal retention requirements.
  • Restriction: Request that we limit processing of your data in certain circumstances.
  • Objection: Object to processing based on legitimate interest grounds.

To exercise any of these rights, contact us at privacy@veltafi.com or use the data management controls in your account settings. We respond to requests within thirty (30) days.

6. Cookie Policy

We use strictly necessary cookies to maintain session state and authentication. We use analytics cookies to understand platform usage and improve the experience. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from using the platform.

7. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, audit logging, regular penetration testing, and incident response procedures. While we take reasonable measures to protect your data, no method of transmission or storage is completely secure.

8. International Transfers

Data may be processed in the United States and other jurisdictions where our infrastructure providers operate. We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses where required.

9. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification with at least thirty (30) days' notice. The "Effective date" at the top of this policy indicates when the latest version took effect.

11. Contact

For questions about this Privacy Policy or to exercise your data rights, contact our Data Protection Officer at privacy@veltafi.com.