Legal

Privacy Policy

Last updated: June 2026  ·  Effective date: June 2026

1. Who we are

VexaPay Inc. ("VexaPay," "we," "us," or "our") operates payment infrastructure for businesses. We are registered as a Money Services Business (MSB) with the Financial Crimes Enforcement Network (FinCEN). This Privacy Policy explains how we collect, use, and protect information when you use our website and services.

2. Information we collect

We collect information you provide directly to us, including:

• Business and contact information (company name, work email, phone number)
• Identity and Know Your Business (KYB) verification documents
• Payment and transaction data required to execute transfers
• API credentials and integration configuration
• Communications you send us (support requests, sales inquiries)

We also collect certain information automatically when you use our platform, including IP addresses, browser type, pages visited, and device identifiers, for security and fraud prevention purposes.

3. How we use your information

We use the information we collect to:

• Provide, maintain, and improve our payment services
• Verify identities and comply with KYB/AML obligations
• Process and settle transactions on your behalf
• Detect and prevent fraud, money laundering, and unauthorized access
• Communicate with you about your account and our services
• Comply with applicable laws and regulatory requirements

4. Legal bases for processing (EEA/UK)

Where applicable, we process personal data under the following legal bases: contractual necessity (to provide the services you request), legal obligation (to comply with financial regulations), legitimate interests (fraud prevention and security), and consent (for marketing communications, which you may withdraw at any time).

5. How we share your information

We do not sell your personal data. We share information only with:

• Licensed banking and payment partners necessary to execute transactions
• Regulatory authorities and law enforcement when required by law
• Service providers who process data on our behalf under data processing agreements
• Successors in the event of a merger, acquisition, or asset sale

6. Data retention

We retain transaction records and KYB documentation for a minimum of five years as required by FinCEN and applicable anti-money laundering regulations. Other data is retained only as long as necessary to provide our services or as required by law.

7. Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security assessments. We are pursuing SOC 2 Type II certification. No system is perfectly secure; we encourage you to use strong credentials and report any suspected security issues to security@vexapay.com.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@vexapay.com. Note that some requests may be limited by our legal obligations as a regulated financial services provider.

9. Cookies

Our website uses essential cookies for security and session management, and analytics cookies to understand how visitors use the site. You can manage cookie preferences in your browser settings. We do not use advertising cookies.

10. Changes to this policy

We will update this policy as our practices evolve or regulations change. Material changes will be communicated via email to registered users at least 30 days before taking effect.

11. Contact

For privacy-related questions or to exercise your rights, contact us at:
VexaPay Inc. · privacy@vexapay.com