Privacy Policy
Last Updated: February 15, 2026
1. Information We Collect
DunePay collects the following types of information:
Personal Information
- Name, email address, phone number
- Date of birth, nationality, residential address
- Government-issued ID (passport, driver's license, national ID)
- Selfie photos for identity verification
- Bank account details and payment information
Transaction Information
- Transaction history, amounts, currencies, recipients
- Payment method details
- IP addresses, device information, browser type
2. How We Use Your Information
We use your information to:
- Process transactions and provide our services
- Verify your identity and prevent fraud (KYC/AML compliance)
- Communicate with you about your account and transactions
- Improve our services and develop new features
- Comply with legal and regulatory requirements
- Detect and prevent illegal activities
3. Information Sharing
We may share your information with:
- Payment Processors: Stripe, PayPal, Flutterwave, Wise, Nium, Thunes
- Banks and Financial Institutions: To facilitate transfers
- Identity Verification Services: For KYC compliance
- Law Enforcement: When required by law or to prevent fraud
- Service Providers: Cloud hosting, analytics, customer support tools
We do not sell your personal information to third parties for marketing purposes.
4. Data Security
DunePay implements industry-standard security measures including:
- 256-bit SSL/TLS encryption for data transmission
- Encrypted database storage
- Multi-factor authentication (MFA)
- Regular security audits and penetration testing
- PCI-DSS compliance for payment data
- IP whitelisting for admin access
- Rate limiting and fraud detection systems
5. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. Transaction records are kept for at least 7 years as required by AML regulations. Account information is retained for 5 years after account closure.
6. Your Rights (GDPR & Data Protection)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal requirements)
- Portability: Receive your data in a machine-readable format
- Object: Object to processing of your data for direct marketing
- Withdraw Consent: Opt-out of non-essential data processing
To exercise these rights, contact us at privacy@dunepay.com
7. Cookies and Tracking
DunePay uses cookies and similar technologies to enhance user experience, analyze usage patterns, and prevent fraud. You can manage cookie preferences through your browser settings. Essential cookies required for service functionality cannot be disabled.
8. International Transfers
Your data may be transferred to and processed in countries outside your residence. We ensure adequate safeguards are in place, including standard contractual clauses and Privacy Shield frameworks where applicable.
9. Children's Privacy
DunePay is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover such data, we will delete it immediately.
10. Changes to Privacy Policy
We may update this Privacy Policy periodically. Users will be notified of significant changes via email or through the Service. Continued use after changes indicates acceptance of the updated policy.
11. Contact Information
For privacy-related inquiries, please contact:
Data Protection Officer: privacy@dunepay.com
General Inquiries: support@dunepay.com
Address: [Company Address]
GDPR Compliance
DunePay is committed to GDPR compliance. EU residents have enhanced rights regarding their personal data. For GDPR-specific requests, email gdpr@dunepay.com