Privacy Policy

This Privacy Policy explains how Flowsmin (“we”, “us”) handles personal and business information when you register for and use our payments platform. We act as a data fiduciary for the information you provide and, where applicable, process transaction data on behalf of your business.

1. Information we collect

• Account & KYC data: business name, contact details, authorised representative information, identity and registration documents, and bank account details.
• Transaction data: payment, payout, refund and settlement records processed through the Services.
• Technical data: IP address, device and browser information, and logs generated when you use the portal or APIs.
• Communications: enquiries and support messages you send us.

2. How we use information

• to verify your identity and onboard your account (KYC);
• to provide, operate and secure the Services, including processing pay-ins and pay-outs;
• to detect, prevent and investigate fraud, abuse and security incidents;
• to meet legal, regulatory, tax and audit obligations;
• to communicate with you about your account, service updates and support.

3. Legal basis

We process information where necessary to provide the Services you request, to comply with legal obligations, for our legitimate business interests (such as security and fraud prevention), and on the basis of your consent where required.

4. How we share information

We share information only as needed to operate the Services, including with banking and payment partners to process transactions, with verification and compliance providers, with professional advisers and auditors, and with regulators or law-enforcement where legally required. We do not sell your personal data.

5. Data security

We apply technical and organisational safeguards including encryption in transit, access controls, secret/credential protection and audit logging. Sensitive credentials are stored encrypted. No system is perfectly secure, but we work to protect your information and to respond promptly to incidents.

6. Data retention

We retain information for as long as your account is active and thereafter as required to meet legal, regulatory and reconciliation obligations, after which it is deleted or anonymised.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is based on it. To exercise these rights, contact us.

8. Cookies

The portal uses essential cookies required for authentication and security. We do not use the marketing site to track you for advertising purposes.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the portal or by email.

10. Contact

For privacy questions or requests, reach out to our team.