Privacy Policy

TastyPay ("TastyPay", "we", "us", or "our") collects information necessary to provide global payout services, verify identities, comply with financial regulations, prevent fraud, and operate our platform. The categories of information we collect depend on how you interact with us and the services you use.

Information You Provide

• Account details such as name, email address, phone number, business role, and account credentials.
• Communications you send us, including support requests, onboarding responses, and messages via chat, email, WhatsApp, or Telegram.
• Marketing preferences and survey responses.

Identity Verification Information

To satisfy Know Your Customer (KYC), Know Your Business (KYB), Anti-Money Laundering (AML), sanctions screening, and counter-terrorism financing obligations, we collect:

• Full legal name, date of birth, residential address, and nationality.
• Government-issued identification documents (passport, national ID, driver's license).
• Selfies, liveness checks, and biometric templates used solely for identity matching.
• Tax identification numbers where required by law.
• Beneficial ownership, control structure, and politically exposed person (PEP) status for business accounts.

Business Information

• Legal entity name, registration number, jurisdiction of incorporation, and registered address.
• Business activity, industry, source of funds, expected transaction volumes, and destination countries.
• Details of directors, authorized signatories, and ultimate beneficial owners.
• Corporate documents such as certificates of incorporation, shareholder registers, and licenses.

Payment Information

• Bank account numbers, IBANs, SWIFT/BIC codes, and correspondent bank details.
• Stablecoin wallet addresses and network information.
• Card details processed by our PCI-DSS compliant payment partners (we do not store full card numbers).
• Transaction history, amounts, currencies, counterparties, and settlement rails used.

Technical Information

• IP address, device identifiers, browser type, operating system, and language settings.
• Login timestamps, session activity, and security events.
• Approximate geolocation derived from IP address for fraud prevention and compliance.
• Log files, error reports, and diagnostic data.

Cookies & Analytics

We use cookies and similar technologies to authenticate users, remember preferences, measure usage, and improve our service. See our Cookie Policy for full details and how to manage your preferences.

We process personal and business information to:

• Onboard clients, verify identities, and open payout accounts.
• Execute, settle, and reconcile payment and payout transactions.
• Perform KYC, KYB, AML, sanctions screening, PEP screening, and adverse media checks.
• Monitor transactions for fraud, financial crime, and unusual activity.
• Provide customer support and respond to inquiries.
• Comply with tax reporting, licensing, and regulatory obligations across jurisdictions.
• Improve, secure, and develop new features on the platform.
• Send service communications and, where permitted, marketing messages.
• Enforce our Terms & Conditions and protect the rights, property, or safety of TastyPay, our clients, and third parties.

For individuals located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract — to provide services you or your business have requested.
• Legal obligation — to comply with AML, KYC, tax, sanctions, and financial services regulations.
• Legitimate interests — to secure the platform, prevent fraud, improve our services, and manage our business, balanced against your rights.
• Consent — for optional marketing communications and certain cookies, which you may withdraw at any time.
• Vital interests and public interest — where required to protect life or comply with lawful requests from authorities.

We share information only where necessary to deliver our services and meet legal obligations. We do not sell personal information.

Banking Partners

Regulated banks, e-money institutions, and financial partners that hold client funds, operate settlement accounts, and provide access to payment rails such as SWIFT, SEPA, Faster Payments, ACH, and local networks.

Payment Partners

Card processors, stablecoin issuers, on/off-ramp providers, foreign exchange counterparties, and remittance networks used to move funds to your beneficiaries.

Service Providers

Vendors that support identity verification, sanctions screening, fraud analytics, cloud hosting, customer support tooling, email delivery, and product analytics. These providers act as processors under our written instructions.

Compliance and Regulatory Requests

Regulators, tax authorities, courts, law enforcement, and financial intelligence units, where disclosure is required by law, subpoena, or lawful request, or where we reasonably believe disclosure is necessary to prevent financial crime.

Corporate Transactions

In the event of a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred to the counterparty subject to appropriate confidentiality obligations.

We retain personal and business information for as long as required to provide our services and to meet legal, regulatory, tax, accounting, and reporting obligations. Under most financial services laws, records related to onboarding, transactions, and compliance must be retained for at least five (5) to ten (10) years after the end of the client relationship or the date of the transaction, depending on jurisdiction.

When information is no longer needed, we delete, anonymize, or securely archive it in line with our retention schedules.

TastyPay maintains administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
• Role-based access controls, least-privilege principles, and multi-factor authentication for privileged users.
• Continuous monitoring, logging, and intrusion detection across our infrastructure.
• Segregation of client fund accounts from operating accounts through our banking partners.
• Regular penetration testing, vulnerability scanning, and independent security reviews.
• Employee training on data protection, information security, and financial crime.

No system is perfectly secure. Please protect your credentials, use strong passwords, and notify us immediately at bo@tastypay.co if you suspect unauthorized access to your account.

TastyPay operates globally and information may be processed in countries other than the one in which it was collected, including the United States, the United Kingdom, the European Union, and jurisdictions where our banking, payment, and technology partners are located.

Where personal data is transferred outside the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other lawful mechanisms.

Subject to conditions and exceptions in applicable law, you may:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of data where processing is no longer necessary and no legal obligation requires retention.
• Restrict or object to certain processing, including for direct marketing.
• Request portability of information you provided under contract or consent.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with your local supervisory authority.

To exercise your rights, contact bo@tastypay.co. We may need to verify your identity before responding.

California residents have the right to know what personal information we collect, use, disclose, and retain; to request deletion or correction; to opt out of the "sale" or "sharing" of personal information; to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights.

TastyPay does not sell personal information. Where information is shared for cross-context behavioral advertising, California residents may opt out by using the "Cookie Settings" control on our website. To submit a CCPA/CPRA request, email bo@tastypay.co. An authorized agent may submit a request on your behalf with written authorization.

TastyPay does not offer services to individuals under the age of 18 and does not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us and we will delete it.

With your consent, or where permitted by law, we may send you product updates, educational content, and offers. You may opt out at any time using the "unsubscribe" link in our emails or by emailing bo@tastypay.co. Service, security, and compliance communications are not marketing and cannot be opted out of while you hold an account.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices. We will post the revised version on this page and update the "Last updated" date. Material changes will be communicated by email or in-app notice where appropriate.

For privacy questions, requests, or complaints, contact our Data Protection Team:

• Email: bo@tastypay.co
• Compliance: bo@tastypay.co
• General inquiries: info@tastypay.co