Privacy Policy — PayKato

1. Information we collect

Account data: name, email, password hash, business details.
KYC data: government ID and selfie collected by our verification partner (Didit) before first payout.
Transaction data: payment amounts, currency, status, references, payout destinations.
Technical data: IP address, device, browser, log and security events.
Communications: messages you send to support.

2. How we use it

Provide and operate the Service.
Verify identity, prevent fraud, and meet AML / KYC obligations.
Process payments and payouts through licensed partners.
Respond to support requests and send service notices.
Improve and secure the product.

3. Legal bases

We process personal data to perform our contract with you, to comply with legal obligations (including AML/KYC), to pursue legitimate interests (security, fraud prevention, product improvement), and, where required, with your consent.

4. Sharing

We share information with payment processors, banking partners, KYC/identity providers, cloud infrastructure, analytics, and email providers strictly to deliver the Service. A current list of categories is in our Data Processing Agreement.

5. International transfers

Personal data may be processed outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

6. Retention

We retain account, KYC, and transaction records for as long as required by applicable financial-services and AML rules (typically up to several years after account closure), and other data for as long as needed for the purposes above.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Contact us to exercise these rights. We may need to verify your identity and may be required to retain certain records despite a deletion request.

8. Security

We use industry-standard administrative, technical, and physical safeguards. No system is perfectly secure; you are responsible for keeping your credentials safe.

9. Children

The Service is not directed to children under 18 and we do not knowingly collect their data.

10. Contact

Privacy questions: contact us.