Privacy Policy

Introduction

Poce Technology Inc. ("Poce Technology," "we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our digital trade platform, APIs, websites, and related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this policy, please do not use our Services.

1. Information We Collect

We collect several categories of information to provide and improve our Services:

1.1 Information You Provide

• Account Information: Company name, contact name, email address, phone number, business address, and password credentials when you register for an account.
• Verification Information: Business registration documents, tax identification numbers, government-issued identification, and other KYC/KYB documentation required for compliance purposes.
• Transaction Information: Payment details, order information, settlement data, shipping addresses, and financial account information.
• Communications: Content of messages, support tickets, and feedback you submit to us.

1.2 Information Collected Automatically

• Usage Data: IP addresses, browser type, device information, pages visited, time spent on pages, and referring URLs.
• API Usage Data: API request logs, response times, error rates, and endpoint usage patterns.
• Cookies and Tracking: We use essential cookies for authentication and session management. Analytics cookies collect anonymized usage data.

1.3 Information from Third Parties

• Identity verification services and credit reference agencies for compliance screening.
• Sanctions list providers and regulatory databases.
• Integration partners and service providers you connect to our platform.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our Services.
• To process transactions and facilitate cross-border settlements.
• To verify identities and conduct KYC/KYB compliance checks.
• To comply with legal obligations, including AML/CTF regulations and sanctions screening.
• To communicate with you about your account, updates, and support inquiries.
• To detect, prevent, and investigate fraud, security incidents, and prohibited activities.
• To analyze usage patterns and improve our platform performance and user experience.
• To send relevant marketing communications (with your consent where required by law).

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our platform (cloud hosting, payment processing, identity verification, email delivery).
• Financial Partners: With banking partners, payment networks, and settlement providers necessary to process transactions.
• Compliance and Legal: With regulatory authorities, law enforcement, or as required by applicable law, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
• With Your Consent: With your explicit direction or consent to share information with third parties.

4. Data Security

We implement and maintain industry-standard security measures to protect your information:

• Encryption of data at rest using AES-256 and data in transit using TLS 1.3.
• Multi-factor authentication and role-based access controls.
• Regular security audits, penetration testing, and vulnerability assessments.
• SOC 2 Type II certified infrastructure with 24/7 security monitoring.
• Employee training on data protection and privacy practices.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors that determine retention periods include:

• The duration of your account and use of our Services.
• Legal and regulatory obligations (e.g., AML record-keeping requirements of 5-7 years).
• Pending or anticipated litigation or regulatory investigations.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request transfer of your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, including direct marketing.
• Restriction: Request restriction of processing under certain circumstances.

To exercise these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law.

7. International Data Transfers

As a global digital trade platform, your information may be transferred to and processed in countries other than your country of residence, including the United States where our primary servers are located. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) and adherence to applicable data protection frameworks.