Privacy Policy

Koopfy Payments LLC (Kontino), 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA, is the controller of the data processed under this policy. Data protection officer: privacidade@kontino.co.

When a Connect partner opens accounts for its own clients, the partner is the controller of the data it collects in its own product; Kontino is the controller of the data it collects for verification, fraud prevention and compliance with legal obligations.

• Registration: name, email, phone, date of birth, address, nationality, tax identification number.
• Verification: document images, selfie and liveness check (processed by the verification Provider), data on shareholders and ultimate beneficial owners, corporate documents.
• Financial: destination bank accounts, balances, transactions, counterparties, stated purpose.
• Technical: IP address, device, browser, access and security logs.
• Communications: messages exchanged with support and the sales team.

• Open and maintain the account and execute the requested transactions (performance of contract).
• Verify identity, prevent fraud and money laundering, screen for sanctions and respond to authorities (legal obligation and legitimate interest).
• Platform security and auditing (legitimate interest).
• Operational communications and, with your consent where required, product updates.

We do not sell personal data.

• Financial and payment Providers that execute the transactions (such as BlindPay and its affiliates) and the banks and networks involved in each transaction.
• Identity verification and sanctions screening providers.
• Infrastructure and technical services: cloud hosting, database, transactional email and monitoring, under contract and only to provide the service.
• The Connect partner through which you opened the account, to the extent necessary for the transaction.
• Authorities, when required by law or valid order.

Data may be processed in the United States and other countries where our Providers are located. We use contractual clauses and security measures consistent with the LGPD, the GDPR where applicable, and other applicable laws.

While the account is active and, after it is closed, for the period required by anti-money laundering rules (generally 5 years) or to exercise rights in legal proceedings. After that, data is deleted or anonymized.

You may request confirmation of processing, access, correction, portability, information on sharing, anonymization or deletion of unnecessary data, and withdrawal of consent. Some data must be retained by legal obligation even after a request.

Requests: privacidade@kontino.co. We respond within 15 days. You may also contact the data protection authority in your country.

Encryption in transit and at rest, role-based access control, logging of administrative access, API keys stored only as hashes, and periodic permission reviews. No system is infallible; we notify data subjects and authorities of material incidents as required by law.

We only use essential cookies: the session cookie that keeps you signed in, and interface preferences. We do not use advertising cookies.

The current version is published here, with the date at the top. Material changes are notified by email or in the app.