Last Updated: June 15, 2025|Effective: July 1, 2025
This Privacy Policy explains how app-airwallex collects, uses, stores, and shares your personal information when you use our global payments infrastructure, API services, and related products. By using our services, you agree to the practices described herein.
Account & identity data: name, email, company name, billing address, and government-issued ID for KYC purposes.
Usage & technical data: IP address, browser type, device identifiers, API request logs, and session data.
Financial data: payment method details, transaction records, and currency conversion history processed through our infrastructure.
2. How We Use Your Data
To provide, operate, and improve app-airwallex services, including fraud detection and compliance screening.
To communicate with you about your account, product updates, and regulatory obligations.
To fulfill legal and regulatory requirements, including AML/CFT obligations under applicable financial law.
3. Cookies & Tracking
We use strictly necessary cookies to maintain sessions and security, functional cookies to remember your preferences, and analytics cookies (e.g., via a third-party analytics provider) to understand usage patterns. You may manage cookie preferences via our Cookie Settings panel. For full details, see our Cookie Policy.
4. Third-Party Sharing
Payment network partners (e.g., Visa, Mastercard, SWIFT) to execute transactions on your behalf.
Cloud infrastructure providers (e.g., AWS, Google Cloud) under data processing agreements.
Regulatory bodies and law enforcement agencies when required by applicable law — never for advertising purposes.
5. Your Rights (GDPR & CCPA)
Right to access, correct, or delete personal data we hold about you.
Right to restrict or object to processing, and to data portability in a machine-readable format.
California residents may opt out of the sale of personal information (we do not sell personal data) and request disclosure of data shared with third parties.
To exercise any right, contact us at [email protected] — we respond within 30 days.
6. Data Retention
We retain personal data for as long as your account is active or as required by financial regulations (typically 5–7 years post-account closure for transaction records). Non-essential data is deleted or anonymised within 90 days of collection.
7. Security
app-airwallex employs AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and regular third-party penetration testing. In the event of a breach affecting your data, we will notify you within 72 hours as required by GDPR Article 33.
8. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, contact us immediately at [email protected] for prompt deletion.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated via email or an in-app notification at least 14 days before taking effect. The 'Last Updated' date at the top of this page will always reflect the current version.
Reach our Data Protection Officer at [email protected] or visit our Contacts page. You also have the right to lodge a complaint with your local data protection supervisory authority.
app-airwallex
Global Payments Infrastructure, Powered by API. Move money across borders at the speed of code.