Privacy
Policy./

01 Information we collect

Information you provide

• Contact details such as name, business email, company, role, and phone number when you request a demo or contact us.
• Communications you send us, including support requests, demo inquiries, and survey responses.

Information collected automatically

• Device, browser, and operating system information.
• IP address, approximate location, and language preferences.
• Usage data such as pages viewed, links clicked, referring URLs, and timestamps, collected through cookies and similar technologies.

Customer data processed on behalf of clients

When our clients use OneKYC to perform KYC, KYB, sanctions screening, or related compliance workflows under a separate written agreement, they may submit personal data about their own end users to our platform. We process that data as a processor on the client’s behalf, in accordance with the client’s instructions and the applicable data processing agreement.

02 How we use information

• To provide, operate, maintain, and improve our website and services.
• To secure our website and prevent fraud or abuse.
• To respond to inquiries, deliver customer support, and send service-related communications.
• To send marketing communications where permitted by law, and from which you can unsubscribe at any time.
• To comply with legal obligations and enforce our agreements.

03 Legal bases for processing

Where required (for example, under the EU and UK GDPR), we rely on one or more of the following legal bases: performance of a contract, your consent, our legitimate interests (such as securing our platform and improving our services), and compliance with legal obligations.

04 How we share information

We do not sell personal information. We share information only as follows:

• Service providers who support our operations (hosting, analytics, customer support) and are contractually bound to protect your data.
• Data sources and screening providers required to deliver KYC, KYB, sanctions, PEP, and adverse-media checks for clients under contract.
• Legal and regulatory authorities when required by law, subpoena, or other lawful process.
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

05 International data transfers

We operate globally, including in the United States and Singapore, and may transfer personal information across borders. Where we transfer personal data out of the EEA, UK, or other jurisdictions with cross-border restrictions, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

06 Data retention

We retain personal information only for as long as necessary to provide our services, comply with legal and regulatory obligations (including record-keeping requirements applicable to KYC/AML programs), resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymize it.

07 Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, and continuous monitoring. No system can be guaranteed completely secure, and we encourage you to notify us promptly of any suspected unauthorized access.

08 Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to our processing of your personal information, and to data portability. You may also have the right to withdraw consent or to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the information below.

If your personal information is processed by OneKYC on behalf of one of our clients, please contact that client directly to exercise your rights.

09 Cookies and tracking

We use cookies and similar technologies to operate our website, remember preferences, measure performance, and improve user experience. You can control cookies through your browser settings. Disabling certain cookies may limit functionality.

10 Children’s privacy

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

11 Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through our website or by other appropriate means.