Privacy notice
Collect less. Protect what matters.
The production operator must publish a jurisdiction-specific privacy notice, retention schedule, lawful bases, and data-subject request process.
Identity data
Contact, profile, identity-provider, KYC, security-event, and session data support verification and account protection.
Financial data
Ledger, transaction, payout token, plan, commission, reconciliation, and audit records support the requested service and compliance.
Sensitive handling
Full payout identifiers belong in encrypted provider vaults. Logs redact tokens, OTPs, passwords, and customer financial identifiers.
Retention and rights
Production retention, deletion exceptions, access, correction, and complaint routes must be approved for the operating jurisdiction.