Privacy Policy

Business & KYC data: legal name, trade/commercial registration, tax numbers, addresses, authorised-signatory identity documents and bank details, collected to verify merchants. Account data: names, emails, phone numbers and roles. Transaction data: amounts, payment status, references and receipts (never full card numbers). Usage data: device, log and analytics information.

To provide and secure the Service, verify your business (KYC/KYB) and prevent fraud, process payments and settlements, provide support, comply with legal and card-scheme obligations, and improve the Service.

Velo does not collect, store or transmit full card numbers or CVV. Card entry is handled by our PCI-DSS-compliant payment partner using hosted fields, keeping the platform within a minimal PCI scope (SAQ A eligibility).

Personal data and verification documents are stored on access-controlled infrastructure, encrypted in transit using TLS 1.2 or higher, and protected with integrity hashing (SHA-256). Uploaded documents are private and accessible only to authorised compliance reviewers. We apply least-privilege access and audit logging.

We share data only with our payment processor and verification partners, infrastructure providers acting on our instructions, and authorities where legally required. We do not sell personal data.

We retain personal and KYC data for as long as your account is active and thereafter for the period required by financial, tax and anti-money-laundering laws, after which it is securely deleted or anonymised.

Subject to applicable law, you may request access to, correction or deletion of your personal data, or object to certain processing, by contacting support@velopay.app.

For privacy questions or data requests, contact us at support@velopay.app.