Privacy Policy

We may collect the following categories of personal information: • Identity data: name, username, or similar identifier. • Contact data: email address, telephone number, and postal address. • Financial data: payment card details (processed securely and never stored in full), bank account information, and transaction history. • Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and platform. • Usage data: information about how you use our website and services. • Communications data: your preferences in receiving marketing from us and your communication preferences.

We use your personal information for the following purposes: • To provide and manage our payment processing services. • To process transactions and send related information, including purchase confirmations and invoices. • To comply with legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements. • To detect, prevent, and investigate fraud and other illegal activities. • To respond to your enquiries and provide customer support. • To send administrative information, such as changes to our terms and policies. • To improve our website, products, and services.

We process your personal data on the following legal bases: • Performance of a contract: processing is necessary to provide our payment services to you. • Legal obligation: processing is required to comply with applicable laws and regulations. • Legitimate interests: processing is necessary for our legitimate business interests, such as fraud prevention and service improvement, where these are not overridden by your rights. • Consent: where you have given explicit consent, for example for marketing communications.

We may share your personal information with: • Payment networks and card schemes (Visa, Mastercard, and others) to process transactions. • Banking and financial institution partners required to settle funds. • Fraud prevention and identity verification service providers. • IT and cloud service providers who support our infrastructure. • Regulatory authorities, law enforcement, and government bodies where required by law. • Professional advisers including lawyers, auditors, and insurers. We do not sell your personal data to third parties.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements. Transaction records are typically retained for a minimum of seven (7) years in accordance with financial regulations. When data is no longer required, we securely delete or anonymise it.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include 256-bit TLS encryption for data in transit, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data: • Right of access: request a copy of the personal data we hold about you. • Right to rectification: request correction of inaccurate or incomplete data. • Right to erasure: request deletion of your personal data in certain circumstances. • Right to restrict processing: request that we limit how we use your data. • Right to data portability: receive your data in a structured, machine-readable format. • Right to object: object to processing based on legitimate interests or for direct marketing. To exercise any of these rights, please contact us at [email protected].

Our website uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files placed on your device. We use strictly necessary cookies (required for the site to function), analytical cookies (to understand how visitors use our site), and functional cookies (to remember your preferences). You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

Your personal data may be transferred to and processed in countries outside the United States. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, to protect your information in accordance with this Privacy Policy.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated effective date. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: XLY Technology 5142 N Academy Blvd, Unit 4328 Colorado Springs, CO 80918 United States Email: [email protected] Phone: +1 (719) 249-2280