Privacy Policy
Last updated: 4 May 2026
1. Who We Are
Kachiq ("Kachiq", "we", "us") is a B2B payment aggregation platform that enables approved ecommerce operators to accept card payments and settle proceeds into stablecoin wallets. Our services are available exclusively to verified business operators (merchants) who have completed our KYB onboarding process.
This Privacy Policy describes how we collect, use, and protect information relating to merchants and their authorised representatives. It does not govern end-consumer data — merchants remain independently responsible for the personal data of their own customers.
2. Information We Collect
2.1 Merchant KYB Data
- Legal entity name, registration number, and jurisdiction
- Director and beneficial owner identification documents
- Business bank or wallet account details
- Product category declarations
- Website URLs and store configurations
2.2 Account & Operational Data
- Email address and contact information
- API credentials and authentication tokens (hashed)
- IP addresses (hashed — never stored in plaintext)
- Dashboard usage logs and session metadata
2.3 Transaction Data
- Order amounts, currencies, and timestamps
- Processor routing decisions and outcomes
- Wallet addresses used for settlement
- Hashed customer email (for fraud scoring — non-reversible)
3. How We Use Your Information
We use collected information to:
- Verify your identity and business (KYB compliance)
- Route and settle payment transactions
- Detect and prevent fraud and money laundering
- Generate reconciliation reports and audit trails
- Communicate about your account, platform changes, or incidents
- Meet our obligations to payment processors and regulators
We do not use your data for advertising, marketing, or sale to third parties.
4. Legal Bases for Processing
We process personal data on the following bases under applicable data protection law:
- Contract performance — processing necessary to provide our payment services
- Legal obligation — KYB/AML compliance, record retention requirements
- Legitimate interests — fraud prevention, security monitoring, platform integrity
5. Data Sharing
We share data only as necessary:
- Payment processors (T0/T1 approved) — to authorise and settle card transactions
- Blockchain networks — wallet addresses and settlement amounts are written to public ledgers
- KYB/AML providers — identity verification partners
- Legal authorities — if required by court order or applicable law
We do not sell, rent, or trade personal data to any third party for commercial purposes.
6. Data Retention
Transaction records and KYB documentation are retained for a minimum of 7 years to satisfy AML and financial record-keeping obligations. Account data is deleted within 90 days of account closure, except where retention is legally required.
7. Security
Kachiq employs layered security controls including AES-256 encryption at rest, TLS 1.3 in transit, IP address hashing, HMAC-authenticated webhooks, and hardware-backed key management. Settlement operations use atomic smart contracts to eliminate partial-settlement risk.
8. Your Rights
Where applicable under law (including GDPR), you have the right to access, correct, or request deletion of your personal data. To exercise any right, contact privacy@kachiq.com. Note that some data cannot be deleted while legally required retention periods are active.
9. Cookies & Tracking
Our merchant dashboard uses session cookies strictly necessary for authentication. We do not use advertising cookies, third-party trackers, or analytics that transmit personal data externally.
10. Changes to This Policy
We will notify active merchants by email at least 14 days before any material change to this policy takes effect.
11. Contact
For privacy enquiries: privacy@kachiq.com