Privacy Policy

Last updated: 3 October 2026

1. Who we are

[Legal entity name], operating under the name CoopFinNetwork (“we”), provides cards, crypto, identity-verification, payment and transfer services to businesses. This policy explains how we handle personal data about: (a) the people who use our dashboard and API on behalf of a business (“account users”); (b) the owners, directors and representatives of those businesses; (c) cardholders registered by our customers; and (d) individuals who go through an identity verification started by one of our customers.

For (a) and (b) we are the controller of the data. For (c) and (d), our customer decides to collect the data and why; we process it to provide the service and, for identity verification and card issuing, we also determine some purposes ourselves, such as fraud prevention and legal compliance. If you are in category (c) or (d), the business that asked you to verify or that registered you is your first point of contact, and you can also write to us.

2. Data we collect

Account and business data

Name, email address, phone number, country, password (stored only in hashed form) and team role.
Company name, registration details, address, business documents and information about owners and representatives that we request during business verification (KYB).
Communications with us, including support requests.

Identity verification and cardholder data

Name, date of birth, nationality, country, phone, email, document type and number, and images of identity documents.
A selfie or face image and the results of face and document checks, which may involve processing of biometric data where the law allows and where required for verification.
The decision of the verification and the customer reference they provided.

Financial and transaction data

Wallet balances, deposits, withdrawals, transfers and payments, with amounts, assets, networks, wallet addresses, transaction hashes, MonCash phone numbers and references.
Card data needed to run the service: card identifiers, brand, last digits, status, balance and transaction history. Full card numbers and security codes are shown only to the authorised owner and every access is logged.
Fees charged and invoices.

Technical data

IP address, device and browser information, session identifiers, log-in times, security and audit logs, and API request logs.

3. How we use data

To create and run your account, authenticate you, and provide the services you request.
To verify businesses and individuals, issue and manage cards, process payments, deposits, withdrawals and transfers, and deliver results and webhooks to our customers.
To prevent, detect and investigate fraud, abuse and security incidents, and to enforce our Terms.
To meet legal duties such as anti-money-laundering, counter-terrorist-financing, sanctions screening, tax, accounting, and requests from authorities.
To communicate with you about the service, security, changes to our terms and support.
To improve and maintain the platform, using aggregated or de-identified data where possible.

We do not sell personal data, and we do not use identity documents or biometric data for advertising.

4. Legal bases

Where the law requires a legal basis, we rely on: performing our contract with you or your business; our legal obligations; our legitimate interests in security, fraud prevention, service improvement and defending legal claims; and, where needed, your consent (for example for certain biometric processing or optional communications), which you can withdraw at any time.

We share data only as needed and under confidentiality and data-protection commitments:

Our customers. If you are verified or registered as a cardholder by a business, they receive the result and the information they need.
Service providers and partners that help us deliver the services: card issuers and networks, identity-verification providers, mobile-money operators, blockchain infrastructure providers, hosting and security providers, email and messaging providers, and a real-time messaging provider used for support chat.
Sign-in providers, if you choose to sign in with an external account such as Google (see section 10).
Authorities and advisers where required by law, to protect rights and safety, or in connection with a merger, financing or sale of the business.

6. International transfers

Our customers, partners and providers operate in several countries, so your data may be processed outside the country where you live. Where required, we use safeguards such as contractual clauses and security measures to protect it.

7. Retention

We keep data for as long as your account is active and afterwards for the period needed for the purposes above, in particular to meet financial-crime, accounting and legal obligations, which often require keeping identity, transaction and audit records for several years after the relationship ends. Retention for identity documents and images is limited to what our verification service and the law require. When data is no longer needed, we delete or anonymise it.

8. Security

We use measures proportionate to the risk, including hashed passwords, expiring single-use links for password reset and team invitations, role-based access, separation of sandbox and live data, rate limiting, logging of access to sensitive card data, and review of withdrawals. No system is perfectly secure; tell us at contact@coopfinnetwork.com if you suspect a problem.

9. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to some processing, receive a copy in a portable format, withdraw consent, and complain to your data-protection authority. Some rights are limited by our legal duties to keep records. To exercise a right, email contact@coopfinnetwork.com. We may need to confirm your identity first. If your data was collected by one of our customers, we may redirect your request to them.

10. Cookies and sign-in

Essential cookies. We use cookies to keep you signed in, protect forms against forgery, and remember your session.
“Keep me signed in”. If you choose it, a secure cookie stores a session token on your device for up to 30 days (14 days for the admin console) and is tied to your browser. Sign out to remove it.
Sign in with Google. If you choose to sign in or link your account with Google, Google tells us your name, email address and a Google account identifier. We use them only to recognise your account and sign you in. Google’s own privacy policy applies to its processing.
Our public website uses fonts and scripts from third-party content networks, which may receive your IP address when you load a page.

We do not use advertising cookies. You can control cookies in your browser; blocking essential cookies may prevent you from signing in.

11. Support messages

If you contact support through the chat in your dashboard or by email, we keep the messages and the details you provide, and the people who handle your request can see them. Messages are transmitted through a real-time messaging provider. Please do not send passwords, full card numbers or private keys in a message.

12. Children

Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect data from children; if you think we have, tell us and we will delete it.

13. Changes

We may update this policy as our services change. We will post the new version with its date and, for material changes, notify you by email or in the dashboard.

14. Contact

[Legal entity name], [Registered address]
Email: contact@coopfinnetwork.com
Data-protection contact: [Name or role, if you appoint one]