FluxPay Privacy Policy

1. Overview & Commitment

FluxPay ("we", "our", or "us") is committed to protecting your personal and financial data with bank-grade security standards. This Privacy Policy explains what information we collect when you use our digital wallet, smart cards, and global payment services, and how we safeguard that information under global privacy regulations including GDPR, UK-GDPR, and CCPA.

2. Information We Collect

To provide compliant financial services, we collect:

• Identity & KYC Data: Legal full name, date of birth, government identification documents, address verification, and biometric facial liveness recordings.
• Transaction & Wallet Data: Incoming and outgoing transfers, card swiping locations, merchant names, amounts, and currency conversions.
• Technical & Device Data: IP address, device fingerprinting, mobile operating system, and geolocation for fraud prevention.

3. How We Use Your Data

We process your data strictly to execute requested transactions, prevent money laundering and fraudulent activity, satisfy anti-terrorist financing obligations, and enhance the responsiveness of our mobile and web applications. We do not and will never sell your personal or financial data to third-party advertisers.

4. Data Safeguarding & Encryption

All sensitive customer data is encrypted in transit using TLS 1.3 and at rest using 256-bit AES cryptographic protocols. Access to user records is restricted to authorized personnel governed by strict least-privilege role-based access controls and dual-custody audit trails.

5. Your Rights

Depending on your jurisdiction, you retain the right to access, rectify, download, or request erasure of personal data, subject to mandatory statutory financial retention periods. You can exercise these rights at any time by contacting our Data Protection Officer at privacy@fluxpay.internal.