Privacy Policy

Paisy is operated by Paisy Inc. (US) and PAISY GLOBAL FINTECH INC. (Canada). The registered addresses are US: 1001 S Main St, Ste 500, Kalispell, MT 59901. Canada: 329 Howe St., Unit #593, Vancouver, BC V6C 3N2. For any privacy question, contact legal@paisy.com.

- Account and identity data - your name, date of birth, address, email, phone number, and the identity documents and verification data we need to confirm who you are (KYC).

- Transaction data - top-ups, card spending, transfers, conversions between digital assets and dollars, balances, and counterparties.

- Device and usage data - device and app information, IP address, log data, and how you use the Paisy app and card.

- Communications - messages you send us, support requests, and related records.

- To open and run your account and issue and service your card.

- To verify your identity and meet anti-money-laundering (AML) and other legal obligations.

- To process top-ups, spending, transfers, and conversions.

- To detect, prevent, and investigate fraud and keep the platform secure.

- To provide support and communicate with you about your account.

- To improve the product and, where you consent, to measure and analyse usage.

We rely on different legal bases depending on the activity. These include performing our contract with you, meeting legal and regulatory obligations, our legitimate interests in running and securing the service, and your consent where required. The legal bases are mapped by jurisdiction, with GDPR bases applying only where applicable.

We share data only with the categories of recipients needed to run Paisy, and only as far as needed. We do not sell your personal data.

- Identity-verification and compliance providers.

- Card-issuing and payment partners.

- Cloud, hosting, and infrastructure providers.

- Analytics and product providers (where you consent).

- Professional advisers, auditors, and, where legally required, regulators and law enforcement.

Some recipients may be located outside your country. Where data is transferred internationally, we put appropriate safeguards in place as required by law. Dynamic, Rain, and AWS may process data in the United States.

We retain KYC and AML records and transaction data for five years after account closure, account and profile data for the life of the account, security logs for 12 months, support records for 24 months, and marketing data until consent is withdrawn. We then delete or anonymise it where appropriate.

We use bank-grade encryption, access controls, and real-time monitoring to protect your data. No system is perfectly secure, so we also ask you to help by keeping your device, credentials, and recovery details safe.

Depending on where you live, you may have the right to access your data, correct it, delete it, object to or restrict how we use it, withdraw consent, and request a copy of your data. To exercise these rights, contact legal@paisy.com. In Canada, you may also contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada. The relevant US authority depends on the operations involved.

We use cookies and similar technologies to run Paisy and, with your consent, to improve it. See our Cookie Policy at /cookies for details and your choices.

Paisy is not for anyone under 18. You must meet our eligibility requirements to open an account. We do not knowingly collect data from under-18s.

We may update this policy from time to time. If we make material changes, we will let you know and update the 'Last updated' date above.

For any privacy question or to exercise your rights, contact legal@paisy.com. There is no named DPO; an accountable person is designated where BC PIPA requires one.