Privacy Policy

1. Information We Collect

Volqan collects different types of information to provide and improve our services:

Account information: name, email, company, role
Technical information: IP addresses, API logs, usage data
Transaction information: payment data processed (tokenized)
Merchant information: KYC/KYB data of onboarded merchants
Device information: hardware identifiers, location, status

2. How We Use Your Information

We use the collected information to:

Provide and maintain Volqan's services
Process payment transactions securely
Prevent fraud and ensure security
Comply with legal and regulatory obligations
Improve our services and develop new features
Provide technical support and customer service
Send important service communications

3. Information Sharing

Volqan may share information with:

Payment service providers (PSPs) integrated in the platform
Technical service providers (hosting, monitoring, security)
Regulatory authorities when legally required
Auditors and legal advisors under confidentiality agreements
In case of merger, acquisition, or asset sale (with prior notice)

4. Data Security

We implement technical and organizational security measures to protect your data:

Data encryption in transit (TLS 1.3) and at rest (AES-256)
PCI DSS Level 1 certification for payment processing
Role-based access controls and multi-factor authentication
Continuous monitoring and threat detection
Regular security audits by independent third parties
Incident response and disaster recovery plans

5. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, and reporting requirements. Transaction data is retained for at least 7 years according to financial regulations.

6. Your Rights (GDPR)

Under GDPR and Spanish data protection legislation, you have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Request deletion of your data (right to be forgotten)
Object to processing of your data
Request data portability
Withdraw consent at any time
File a complaint with the data protection authority

7. Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience, analyze service usage, and provide personalized features. You can manage cookie preferences in your browser settings.

8. International Transfers

Volqan operates globally and may transfer data outside the European Economic Area (EEE). All transfers are made with appropriate safeguards, including standard contractual clauses approved by the European Commission.

9. Children's Privacy

Volqan's services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover we have collected data from a minor, we will delete it immediately.

10. Changes to this Policy

We may update this privacy policy periodically. We will notify you of any significant changes by email or through a prominent notice on our platform. The last update date is indicated at the beginning of this policy.