Privacy Policy

Last Updated: February 15, 2026

1. Information We Collect

DunePay collects the following types of information:

Personal Information

  • Name, email address, phone number
  • Date of birth, nationality, residential address
  • Government-issued ID (passport, driver's license, national ID)
  • Selfie photos for identity verification
  • Bank account details and payment information

Transaction Information

  • Transaction history, amounts, currencies, recipients
  • Payment method details
  • IP addresses, device information, browser type

2. How We Use Your Information

We use your information to:

  • Process transactions and provide our services
  • Verify your identity and prevent fraud (KYC/AML compliance)
  • Communicate with you about your account and transactions
  • Improve our services and develop new features
  • Comply with legal and regulatory requirements
  • Detect and prevent illegal activities

3. Information Sharing

We may share your information with:

  • Payment Processors: Stripe, PayPal, Flutterwave, Wise, Nium, Thunes
  • Banks and Financial Institutions: To facilitate transfers
  • Identity Verification Services: For KYC compliance
  • Law Enforcement: When required by law or to prevent fraud
  • Service Providers: Cloud hosting, analytics, customer support tools

We do not sell your personal information to third parties for marketing purposes.

4. Data Security

DunePay implements industry-standard security measures including:

  • 256-bit SSL/TLS encryption for data transmission
  • Encrypted database storage
  • Multi-factor authentication (MFA)
  • Regular security audits and penetration testing
  • PCI-DSS compliance for payment data
  • IP whitelisting for admin access
  • Rate limiting and fraud detection systems

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Transaction records are kept for at least 7 years as required by AML regulations. Account information is retained for 5 years after account closure.

6. Your Rights (GDPR & Data Protection)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legal requirements)
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing of your data for direct marketing
  • Withdraw Consent: Opt-out of non-essential data processing

To exercise these rights, contact us at privacy@dunepay.com

7. Cookies and Tracking

DunePay uses cookies and similar technologies to enhance user experience, analyze usage patterns, and prevent fraud. You can manage cookie preferences through your browser settings. Essential cookies required for service functionality cannot be disabled.

8. International Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate safeguards are in place, including standard contractual clauses and Privacy Shield frameworks where applicable.

9. Children's Privacy

DunePay is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover such data, we will delete it immediately.

10. Changes to Privacy Policy

We may update this Privacy Policy periodically. Users will be notified of significant changes via email or through the Service. Continued use after changes indicates acceptance of the updated policy.

11. Contact Information

For privacy-related inquiries, please contact:

Data Protection Officer: privacy@dunepay.com

General Inquiries: support@dunepay.com

Address: [Company Address]

GDPR Compliance

DunePay is committed to GDPR compliance. EU residents have enhanced rights regarding their personal data. For GDPR-specific requests, email gdpr@dunepay.com