Privacy Policy

VolkPay Inc. ("VolkPay", "we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it. By using our platform, you agree to the practices described herein.

We collect the following categories of personal information:

• Identity data: Full legal name, date of birth, government-issued identification documents, and biometric liveness verification data.
• Contact data: Email address, phone number, and any correspondence you send us.
• Financial data: Blockchain wallet addresses, transaction history, card usage records, and account balances.
• Technical data: IP address, browser type, device identifiers, cookies, and usage analytics.
• Compliance data: Information collected to satisfy KYC/AML obligations, including source of funds declarations.

We process your personal data for the following purposes:

• To verify your identity and fulfil regulatory obligations under applicable AML and KYC laws.
• To operate and maintain your VolkPay account and issue virtual payment cards.
• To process transactions and detect and prevent fraudulent activity.
• To communicate with you regarding your account, service updates, and compliance matters.
• To improve our platform through aggregated and anonymised analytics.

We rely on the following legal bases:

• Performance of a contract with you — to deliver the services you have requested.
• Compliance with a legal obligation — to meet our AML, KYC, and reporting requirements.
• Legitimate interests — to operate a secure and compliant financial platform.
• Your consent — where explicitly obtained (e.g. marketing communications).

We may share your data with the following categories of recipients:

• Licensed card-issuing partners — necessary to fulfil card issuance and transaction settlement.
• Identity verification providers — used to conduct KYC checks on our behalf.
• Regulatory authorities — where required by law, court order, or regulatory direction.
• Service providers — acting as data processors under strict contractual data protection obligations.

We retain personal data for as long as necessary to provide our services and fulfil legal and regulatory requirements. Transaction and identity records are retained for a minimum of five (5) years following account closure, as required under applicable financial crime legislation.

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention obligations.
• Object to or restrict certain types of processing.
• Data portability — receive your data in a structured, machine-readable format.
• Lodge a complaint with your local data protection supervisory authority.

We implement industry-standard technical and organisational measures to protect your data:

• AES-256 encryption for all data at rest.
• TLS 1.3 for all data in transit.
• Role-based access controls and least-privilege principles.
• Regular independent security reviews of our infrastructure.
• Continuous intrusion detection and security monitoring.

We use cookies and similar tracking technologies as described in detail in our Cookie Policy. You may manage cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform at least 14 days before they take effect. Continued use of the Service after that date constitutes acceptance of the revised Policy.

For privacy-related enquiries, please contact our Data Protection Officer at privacy@volkpay.cc. For general legal matters, write to legal@volkpay.cc.