Privacy Policy

Effective date: April 1, 2026

1. Introduction

Partna ("we," "us," or "our") operates stablecoin-powered payment infrastructure that enables businesses to collect, convert, and settle payments between African currencies and USD/stablecoins. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our APIs, dashboard, website, and related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our Services.

2. Information We Collect

Account and identity information. When you register for an account, we collect your name, email address, company name, job title, and other information you provide. For compliance purposes, we may also collect government-issued identification, proof of address, and business registration documents as part of our Know Your Customer (KYC) and Know Your Business (KYB) processes.

Financial and transaction data. We collect information related to transactions processed through our infrastructure, including payment amounts, currency pairs, wallet addresses, bank account details, settlement records, and transaction timestamps.

Technical and device data. We automatically collect information about how you access our Services, including IP addresses, browser type and version, device identifiers, operating system, referral URLs, and API usage logs.

Usage data. We collect information about your interactions with our Services, including pages visited, features used, dashboard activity, and API call patterns.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our payment infrastructure and Services
  • Process transactions, including currency conversions and settlements
  • Comply with legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements
  • Verify your identity and conduct KYC/KYB due diligence
  • Detect, prevent, and investigate fraud, unauthorized transactions, and other illegal activities
  • Communicate with you about your account, transactions, and service updates
  • Analyze usage patterns to improve performance and reliability
  • Respond to your inquiries and provide customer support

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contractual necessity: Processing required to provide our Services under our agreement with you.
  • Legal obligation: Processing required to comply with applicable laws, including AML/CTF regulations, tax reporting, and financial services regulations.
  • Legitimate interest: Processing necessary for our legitimate business interests, such as fraud prevention, security, and service improvement.
  • Consent: Where we rely on your consent, you may withdraw it at any time by contacting us.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with the following categories of recipients:

  • Payment and banking partners: To process transactions, settle payments, and facilitate currency conversions.
  • KYC/AML service providers: To perform identity verification, sanctions screening, and transaction monitoring.
  • Regulatory and law enforcement authorities: When required by law, regulation, or legal process.
  • Service providers: Third-party vendors who assist us in operating our Services, such as cloud hosting, analytics, and customer support.

All third-party recipients are bound by contractual obligations to protect your data and use it only for the purposes for which it was shared.

6. International Data Transfers

Our Services operate across multiple jurisdictions. Your personal data may be transferred to and processed in countries other than the country in which you reside, including the United States and various African nations. We implement appropriate safeguards to protect your data during such transfers, including standard contractual clauses and data processing agreements.

7. Data Retention

We retain your personal data for as long as necessary to provide our Services and fulfill the purposes described in this policy. Transaction records and compliance data are retained for a minimum of five (5) years after the end of the business relationship, as required by applicable AML/CTF regulations. We may retain data for longer periods where required by law or for legitimate business purposes.

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security audits, and monitoring of our systems for potential vulnerabilities. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and support our marketing efforts. Essential cookies are required for the operation of our Services. Analytics cookies help us understand how visitors interact with our website. You can manage your cookie preferences through your browser settings.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Restriction: Request restriction of processing in certain circumstances.

These rights may be subject to limitations under applicable law, including the EU General Data Protection Regulation (GDPR), Nigeria Data Protection Regulation (NDPR), and South Africa's Protection of Personal Information Act (POPIA). To exercise your rights, contact us at the address below.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Services. We will notify you of material changes by posting the updated policy on our website and, where appropriate, through email or dashboard notifications. Your continued use of our Services after such changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Partna
Email: legal@getpartna.com
Website: getpartna.com