Privacy Policy

Plaitr (“we”, “us”, or “our”) is committed to protecting the privacy of its users (“you” or “your”) of the Plaitr website at plaitr.com, any Plaitr mobile applications, related media, dashboards, APIs, or other online or digital services provided by Plaitr (collectively, the “Platform”). The Platform provides access to products, features, and programs offered by Plaitr, whether directly or in partnership with third-party providers (collectively, the “Plaitr Offerings”).

This Privacy Policy outlines the types of information we collect, how we use and share it, and the rights you have. It applies to your access to the Platform and the Plaitr Offerings as detailed in our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service. If you do not agree with this Privacy Policy or any part of it, do not access or use the Platform or any Plaitr Offering.

1. About the platform

Plaitr is a financial technology provider for businesses. We are not a bank or money services business and we do not hold, store, or take custody of user funds, digital assets, or private keys. Certain Plaitr Offerings are issued or managed by third-party partners, including licensed financial institutions, payment networks, and program managers. For those Offerings, we may act as a data controller for certain activities (for example, user accounts and marketing) and as a data processor for others (for example, facilitating partner-required KYC/KYB).

Our partners act as independent controllers for the personal data they collect and process in connection with their own services, including compliance with applicable laws and payment network rules. Review their privacy policies for details.

2. Data we collect

The information we collect depends on how you interact with the Platform and which Plaitr Offerings you use. We collect and process two broad categories.

2.1 Data you voluntarily provide

This includes any data you submit or make available in the course of using the Platform or the Plaitr Offerings. It may be personal (identifies you or is linked to you) or non-personal.

Account and identity information. Name, residential and business address, email, phone, nationality, date of birth, government-issued identity proof, proof of address (utility bill, bank statement), business registration documents, and self image or video for identity verification, to create and manage your Plaitr Account, meet AML/KYC/KYB and sanctions screening requirements, comply with applicable laws, and deliver Offerings that require verified identity.

Financial information. Bank account details, payment card details (processed via PCI-compliant providers), blockchain wallet addresses, tax identification numbers for reporting, and other financial data to process payments, payouts, and settlements, comply with tax and recordkeeping obligations, and detect and prevent fraudulent or unauthorized transactions.

Transactional and usage context. Payment amounts and currency, transaction descriptions, invoice details submitted via APIs, API keys and associated metadata, to execute and record transactions, troubleshoot issues, and improve reliability.

Communications. Emails, support tickets, live chat logs, call recordings (if applicable), survey responses, product feedback, and dispute or chargeback evidence, to respond to inquiries, resolve disputes, enforce agreements, and maintain evidence for compliance and legal purposes.

Marketing and preferences. Opt-in or opt-out choices for newsletters or promotions and preferred communication format, to send relevant service updates and tailor your experience.

2.2 Data we automatically collect

Technical and device data. IP address (server logs only), inferred approximate location, device type, operating system, browser type or version, unique device identifiers, screen resolution, time zone, and language, to optimize the Platform, maintain security, detect suspicious access, enforce geographic restrictions such as sanctioned jurisdictions, and support performance analysis.

Platform interaction data. Pages or screens viewed, navigation paths, session duration, links clicked, features accessed, form completion rates, API call logs (timestamps, endpoints, status codes), and transaction attempt metadata, to analyze usage patterns, identify and fix issues, ensure APIs function as intended, and maintain accurate operational records.

Cookies and similar technologies. Session cookies for login persistence, functional cookies for preferences, and analytics cookies for usage statistics, to personalize content and settings and understand site performance. See Section 7 for details.

Partner-generated data. Verification data from KYC/KYB providers, sanctions screening outcomes, issuer or payment network transaction responses, and dispute or chargeback status updates, to meet compliance obligations, validate transactions and eligibility, resolve disputes, and align with partner and network requirements.

We do not seek to collect information from minors. See Section 12.

3. How we collect data

Directly from you. When you: (a) create or update a Plaitr Account; (b) submit identity or business verification documents; (c) link a bank account, wallet, or payment method; (d) create or process a transaction, payment link, or payout; (e) use our developer APIs or generate API keys; (f) communicate with us via email, chat, support tickets, or phone; (g) respond to surveys or product feedback requests; (h) opt in to marketing communications; or (i) participate in a promotion or event we organize.

Automatically through the Platform. Server logs (IP, request, timestamps), cookies and similar tracking technologies, session monitoring tools for debugging and improvement, device and browser fingerprinting for security and fraud prevention, API call logs, and payment network responses captured during processing.

From our partners or service providers. When you: (a) complete KYC/KYB through an identity provider; (b) are screened against sanctions or watchlists; (c) conduct a card transaction and we receive transaction metadata from the issuer or network; (d) are involved in a dispute or chargeback; or (e) interact with an integration partner that passes usage or account data to us.

We may combine data from these sources to verify accuracy of information you provide, derive insights about Platform usage, or create aggregated, anonymized datasets for analytics, reporting, or product development. Aggregated data does not identify you personally.

4. How we use data

To provide and operate the Platform. Create and manage user Accounts, business profiles, and developer accounts, enable access to Plaitr Offerings, process and settle transactions and payouts, and maintain technical functionality.

To verify identity and ensure compliance. Conduct KYC, KYB, and AML checks, screen against sanctions and watchlists, confirm eligibility, and meet legal, regulatory, tax, and contractual obligations.

To secure the Platform and prevent fraud. Authenticate users and authorize account actions, detect and investigate fraud, chargebacks, and prohibited activities, enforce our Terms of Service and Prohibited Use Policy, and protect the rights and safety of Plaitr, users, and partners.

To improve and develop the Platform and Offerings. Debug errors, measure performance, and enhance user experience, test and develop new features, and personalize your interface based on activity.

To communicate with you. Respond to inquiries and feedback, send operational notifications (transaction status, policy changes, security alerts), deliver marketing communications if you opt in, and provide onboarding and developer resources.

To facilitate partner and network operations. Share transaction, verification, and compliance data with issuers, program managers, and payment networks for Plaitr Offerings, and exchange required information with integration partners.

To meet legal and regulatory requirements. Respond to lawful requests, court orders, and regulatory inquiries, comply with AML/CTF laws and sanctions regimes, and fulfill tax reporting and financial disclosure obligations.

5. Who we share data with

In the context of processing data under this Privacy Policy, we may share data with trusted third parties as necessary to operate the Platform, deliver Plaitr Offerings, and comply with our legal and contractual obligations. This may include service providers who perform functions on our behalf, such as identity verification, compliance and sanctions screening, payment processing, transaction settlement, cloud hosting, analytics, customer support, and permitted marketing communications. We may also share data with our subsidiaries or affiliates for operational purposes, only if necessary.

If you apply for or use any Plaitr Offerings, we may share relevant data with our Partner Institutions (including Card Program partners, payout providers, banks, settlement agents, and virtual account providers), payment networks, vendors responsible for card manufacturing and delivery, and integration partners you choose to connect with, such as e-commerce platforms, automation tools, or other applications that interact with our APIs.

We may disclose information to regulatory authorities, government agencies, payment networks, and law enforcement when required by law, regulation, court order, or applicable network rules, or when necessary to protect the rights, property, and safety of Plaitr, our users, or others. Information may also be shared in connection with dispute resolution, chargebacks, legal proceedings, or a corporate transaction such as a merger, acquisition, or sale of assets.

We may share information with your consent or at your direction, and we may share aggregated or anonymized data that does not identify you with business partners, industry groups, or the public for analytical, research, or marketing purposes.

We share data only on a need-to-know basis and only when the processing by the recipient is strictly limited to the purposes identified in this Privacy Policy. We operate globally and may process your personal data around the world where our facilities or providers are located. We do not sell your personal data.

We may transfer and process your information outside your country (including in the United States). Where required, we use appropriate safeguards for cross-border transfers, including Standard Contractual Clauses or equivalent. Contact privacy@plaitr.com for details.

6. Data retention and storage

We retain personal data only as long as necessary for the purposes for which it was collected and in accordance with applicable laws. Retention periods vary by category and purpose. We consider the amount and sensitivity of data, potential risks from unauthorized access, the purposes of processing, the availability of alternative means, and legal requirements.

We may retain personal data to comply with legal or regulatory obligations, or where needed for a legal claim, complaint, litigation, or regulatory proceeding. Business and legal requirements may oblige us to retain records for extended periods (for example, AML compliance or accounting obligations). Where feasible we anonymize data so it can no longer identify you and use that data indefinitely.

Contact form submissions to plaitr.com are retained for up to 24 months unless deletion is requested earlier.

7. Cookies and similar technologies

The Platform uses cookies, pixels, SDKs, local storage objects, and similar tools (collectively, “cookies”) to provide functionality, operate securely, improve performance, analyze usage, and deliver a personalized experience.

Cookies may be used by Plaitr and by our service providers and partners. Plaitr’s cookies enable core Platform features such as secure login, user settings, and authenticated API calls. Third-party cookies from service providers or partners perform functions such as analytics, customer support chat, fraud detection, and secure card enrollment.

Strictly necessary cookies include session cookies for authentication, security cookies to detect unauthorized access, and cookies required to process transactions or maintain your language and region preferences. These cannot be disabled through our system, although you may block them in your browser; doing so may render the Platform unusable.

Performance and analytics cookies help us understand how users interact with the Platform. Plaitr uses PostHog for analytics on plaitr.com in a privacy-friendly configuration: opt-in only, no autocapture, no session recording, no IP collection. Full inventory is available on our Cookie Policy.

Functional cookies remember your preferences and settings. In addition to cookies, we may use SDKs in our mobile applications and API libraries to collect technical and usage data, authenticate requests, and enable push notifications, subject to your device settings.

Where legally required, we request your consent before placing non-essential cookies. You can withdraw consent at any time through the cookie preference tools on the Platform or by adjusting your browser or device settings. Disabling or blocking certain cookies may affect the availability of the Platform.

For a detailed cookie inventory, contact privacy@plaitr.com.

8. Your rights

Depending on where you live, you may have rights under applicable data protection laws to:

• access the personal information we hold about you and receive a copy in a portable format;
• correct inaccurate or incomplete personal information;
• delete personal information, subject to legal, regulatory, or contractual record-keeping requirements (for example, AML/KYC laws may require us to retain records for a set period);
• restrict or object to certain processing, including for direct marketing;
• withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• opt out of the “sale” or “sharing” of personal information, or of targeted advertising, where applicable under laws such as the California Consumer Privacy Act (CCPA/CPRA);
• request details about how we process your personal information; and
• appeal a decision we make in response to your privacy request if applicable law grants you that right.

To exercise these rights, email privacy@plaitr.com with “Privacy Request” in the subject line. We may need to verify your identity and may deny or limit requests where allowed or required by law. We respond within 30 days.

Region-specific disclosures

California and other U.S. state laws. Depending on your state, you may have rights to know or access, delete, correct, opt out of the sale or sharing of personal information and targeted advertising, and to limit use of sensitive personal information. We do not sell personal information. If our practices change to involve sharing for cross-context behavioural advertising, we will provide required opt-out mechanisms and honor Global Privacy Control signals.

EEA and UK (GDPR / UK GDPR). Legal bases include performance of a contract, compliance with legal obligations, our legitimate interests (security, fraud prevention, product improvement), and consent (where used). You have rights to access, rectification, erasure, restriction, objection, and data portability, and to lodge a complaint with your data protection authority.

India (DPDP Act 2023). You have the right to access, correct, and erase your personal data, and to nominate another individual to exercise these rights in the event of your death or incapacity.

9. Storage, security, and risk mitigation

We use a combination of technical, organizational, and administrative measures designed to protect information from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These may include encryption in transit and at rest, secure server infrastructure, access controls, network monitoring, intrusion detection, and regular security testing.

No system or method of transmission over the Internet is completely secure. We cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your Account credentials, API keys, and any other security information. Enable multi-factor authentication where available.

If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

10. Third-party services and links

The Platform may contain links to third-party websites, applications, and services, or allow you to connect to and interact with third-party services (including integration partners, card program partners, and other external tools). We are not responsible for the content, privacy practices, or security of these services. Your interactions with them are governed by their own terms and privacy policies. Review them before providing your information.

11. Non-custodial and regulatory notices

Plaitr is a financial technology provider and does not hold or custody funds, digital assets, or private keys. Certain records and transaction data are controlled by our regulated Partner Institutions, Issuers, and payment networks. We may be legally prohibited from notifying you of certain compliance actions, including the filing of suspicious activity reports (SARs) or other regulatory reports. Nothing in this Privacy Policy constitutes legal, investment, or tax advice. You are solely responsible for your decisions and for complying with your tax obligations.

12. Minors

As provided in our Terms of Service, the Platform and the Plaitr Offerings are not intended for anyone under 18 (or the age of majority in their jurisdiction). We do not intend to, or knowingly, collect data related to a minor. If you believe such data has been collected, contact privacy@plaitr.com.

13. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time to reflect changes in law, our data collection or sharing practices, advances in technology, features, security, or compliance requirements. Updates will be indicated by the “Last updated” date at the top of this Privacy Policy. Review this Privacy Policy regularly. Any modifications take effect on the date specified as “Last updated”.

By continuing to access or use the Platform and Plaitr Offerings, you confirm that you have read and understood the latest version.

14. Contact information

If you have questions or comments about this Privacy Policy, our privacy practices, the processing of your personal data, or the exercise of your rights, contact us by email at privacy@plaitr.com. General questions: support@plaitr.com.