Privacy Policy

1. Information We Collect

We collect information necessary to provide our enterprise treasury and cross-border payment coordination services, comply with applicable laws and regulations, and improve your experience.

1.1 Account and Business Information (Stabled as Data Controller)

• Business identity: Company legal name, registration number, jurisdiction of incorporation, registered address, and business type.
• Account credentials: Email address, password (stored in hashed form), and multi-factor authentication details.
• Authorized users: Names, email addresses, and roles of individuals authorized to operate your account.
• Communications: Support tickets, messages, and any other correspondence you submit to us.
• Transaction metadata: Timestamps, payment amounts, counterparty identifiers, and exchange rates associated with transactions you initiate through our platform.

1.2 KYC / KYB Data: Stabled as Data Processor (Limited Role)

• KYB documentation: Articles of incorporation, beneficial ownership structures, shareholder registries, and business licenses.
• KYC documentation: Government-issued identification, date of birth, taxpayer ID, and proof of address for authorized representatives and beneficial owners.
• Sanctions screening data: Information used to screen against OFAC, UN, EU, UIF (Argentina), and other applicable watchlists.

1.3 Information We Collect Automatically

• Usage data: Pages visited, features used, transaction initiation events, and session duration.
• Device and technical data: IP address, browser type, operating system, and device identifiers.
• Log data: Server logs, error reports, and API request metadata.
• Cookies and similar technologies: See Section 8 for details.

2. How We Use Your Information

2.1 Platform Operations (Stabled as Controller)

• Account management: To open, maintain, and secure your Stabled account.
• Transaction coordination: To route payment instructions to the appropriate third-party provider and generate transaction records.
• Security and fraud prevention: To detect and prevent fraudulent transactions and unauthorized account access.
• Communications: To send transaction confirmations, account alerts, security notifications, and service updates.
• Customer support: To respond to inquiries and resolve disputes.

3. How We Share Your Information

We do not sell your personal or business information. We share information only as described below.

3.1 Regulated On/Off-Ramp Providers

3.2 Identity Verification Provider

Our licensed identity verification provider processes identity verification (KYC) on behalf of Stabled and the applicable on/off-ramp provider. Stabled does not retain the underlying documents after successful transmission.

3.3 Regulatory and Law Enforcement Authorities

We may disclose information to financial regulators, law enforcement, tax authorities, and other government bodies when required by applicable law, including the CNV, UIF, OFAC, FinCEN, and equivalent authorities in Brazil, Chile, Colombia, Mexico, and Peru.

4. Data Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ in transit, multi-factor authentication, role-based access controls, and regular penetration testing. To report a security concern, contact security@stabled.co.

5. Data Retention

Transaction metadata and account records are retained for a minimum of 5 years from the date of the transaction or account closure. KYC/KYB source documents are deleted immediately after successful transmission to the relevant provider. Stabled does not retain underlying KYC documents beyond the time required for transmission.

6. Your Rights

To exercise rights regarding data for which Stabled is the controller, contact us at privacy@stabled.co. We will respond within 30 days.

7. Cookies

• Strictly necessary cookies: Essential for authentication, session management, and security.
• Functional cookies: Remember your preferences.
• Analytics cookies: Aggregated, anonymized usage data. No KYC data is included.

8. Regulatory Compliance: Argentine VASP Framework

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-platform notice at least 14 days before they take effect.

10. Contact Us