Privacy Policy - Data Protection & Security

Introduction

Overview of our data protection practices

This Privacy Policy explains how Paysolo O.O.D. ("Paysolo", "we", "us", "our"), a company incorporated in Bulgaria with company registration number 207268330, collects, uses, stores, and protects your personal data when you use our website (www.paysolo.io) and services.

We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and all applicable Bulgarian and European data protection laws. This policy applies to all users of our platform, including individuals and businesses.

Data Controller

The data controller for your personal data is Paysolo O.O.D., registered at George Washington 24, fl. 3, office 6, Sofia, Bulgaria. You can contact us regarding data protection matters at contact@paysolo.io

Our Data Protection Officer can be reached at support@paysolo.io

Scope of Data Collection

2.1

We collect personal data that you provide directly to us during account registration, identity verification (KYC), and use of our services. This includes your name, email address, phone number, date of birth, government-issued identification documents, proof of address, and financial information.

2.2

We also automatically collect certain technical data when you visit our website, including your IP address, browser type, device information, pages visited, and referring URLs.

3. Sources of Data

3.1

We collect personal data directly from you when you register for an account, complete verification, use our services, contact our support team, or communicate with us through any channel.

3.2

We may also receive personal data from third-party sources, including our payment partners, identity verification providers, sanctions and PEP screening databases, and public registers, as required for regulatory compliance purposes.

Purpose & Legal Basis

Why and how we process your data

We process your personal data for the following purposes, each supported by a specific legal basis under the GDPR:

Service Delivery (Contractual Necessity)

We process your data to provide our services, including account management, payment processing, crypto asset exchange, customer support, and communication about your account and transactions.

Regulatory Compliance (Legal Obligation)

We are legally required to process certain personal data to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, tax reporting obligations, and other applicable laws.

This includes:

Identity verification and ongoing monitoring
Sanctions and PEP screening
Transaction monitoring for suspicious activity
Reporting to Financial Intelligence Units as required
Record-keeping for the legally mandated retention period

Analytics & Improvement (Legitimate Interest)

We use aggregated and anonymized data to analyze usage patterns, improve our platform and services, develop new features, and ensure the security and stability of our systems.

Marketing Communications (Consent)

With your consent, we may send you marketing communications about our products, services, and promotions. You can withdraw your consent at any time by clicking the unsubscribe link in our emails or contacting us.

Legal Claims (Legitimate Interest)

We may process your personal data to establish, exercise, or defend legal claims, and to protect the rights, property, or safety of Paysolo, our users, or the public.

Data Sharing with Partners (Contractual Necessity)

We share necessary personal data with our licensed payment partners and service providers to facilitate the services you have requested, subject to appropriate data processing agreements.

Risk Assessment (Legitimate Interest / Legal Obligation)

We conduct risk assessments and profiling as required by AML regulations and to protect our platform against fraud. This may include automated processing of your transaction data to detect unusual patterns.

Complaints Handling (Legal Obligation / Legitimate Interest)

We process personal data to handle and resolve complaints, respond to inquiries from regulatory authorities, and maintain records of our complaint resolution processes.

Your Rights

5.1

Under the GDPR, you have specific rights regarding your personal data. We are committed to facilitating the exercise of these rights and will respond to any valid request within one month.

5.2

To exercise any of your rights, please contact us at contact@paysolo.io or support@paysolo.io. We may need to verify your identity before processing your request.

6. Our Obligations

6.1

We are obligated to provide you with information about the personal data we hold about you within one month of your request. In complex cases, this period may be extended by a further two months, and we will inform you of any such extension.

6.2

We will not charge a fee for responding to your data protection requests unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

7. Your GDPR Rights

Under the GDPR, you have the following rights:

Right of Access — You have the right to request a copy of the personal data we hold about you.
Right to Rectification — You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure — You have the right to request deletion of your personal data, subject to our legal retention obligations.
Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object — You have the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.

Commission for Personal Data Protection

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection of Bulgaria, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria.

Data Recipients

8.1

We may share your personal data with our licensed payment partners, identity verification providers, blockchain analytics firms, legal and tax advisors, regulatory authorities, and IT service providers — all subject to appropriate confidentiality and data processing agreements.

8.2

We do not sell your personal data to third parties. We only share data as necessary to provide our services, comply with legal obligations, or protect our legitimate interests.

Data Retention

9.1

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

9.2

Specific retention periods apply depending on the type of data:

Account and transaction data: retained for a minimum of 5 years after account closure, as required by AML regulations.
KYC documentation: retained for a minimum of 5 years after the end of the business relationship.
Marketing consent records: retained for the duration of the consent plus 3 years.

9.3

When data is no longer required, it will be securely deleted or anonymized in accordance with our data retention and destruction policies.

10. Co-Administration

10.1

In certain cases, Paysolo may act as a joint controller with its payment partners, where both parties jointly determine the purposes and means of processing your personal data.

10.2

In such cases, we ensure that:

A joint controller agreement is in place that defines each party's responsibilities
You are informed about the joint processing and your rights
You can exercise your rights with either controller

10.3

Where we act as a data processor on behalf of a partner, we process data only according to the partner's documented instructions and in compliance with a data processing agreement.

10.4

You can contact us at any time to understand how your data is processed and who the responsible controllers are.

11. International Transfers

11.1

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11.2

We will only transfer personal data to countries that the European Commission has recognized as providing an adequate level of data protection, or where appropriate safeguards are in place.

12. Security Measures

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, regular security audits, and employee training. However, no method of transmission over the internet or electronic storage is 100% secure.

Cookies & Tracking Technologies

13.1

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content.

13.2

Essential cookies are necessary for the website to function properly and cannot be disabled. They enable core functionalities such as security, session management, and accessibility.

13.3

Analytics and functional cookies help us understand how visitors interact with our website and allow us to remember your preferences. You can manage these cookies through your browser settings.

13.4

For detailed information about our use of cookies, please refer to our Cookie Policy.

Automated Decision-Making

How we use automated processing

14.1

We may use automated decision-making processes in the following contexts:

Transaction monitoring: Automated systems analyze transactions in real-time to detect patterns that may indicate fraudulent activity, money laundering, or other suspicious behavior.
Risk assessment: Automated risk scoring may be applied during onboarding and ongoing monitoring to comply with AML/KYC requirements.

14.2

You have the right to request human intervention in any automated decision that significantly affects you, to express your point of view, and to contest the decision. Contact us at support@paysolo.io to exercise this right.

Policy Updates

15.1

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by sending you an email.

15.2

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

Contact & Inquiries

Paysolo O.O.D.

Data Controller

Paysolo O.O.D.
UIC: 207268330
Sofia, Bulgaria

General Contact

contact@paysolo.io

Data Protection Officer

support@paysolo.io

Introduction

Overview of our data protection practices

Data Controller

Our Data Protection Officer can be reached at support@paysolo.io

Scope of Data Collection

2.1

2.2

We also automatically collect certain technical data when you visit our website, including your IP address, browser type, device information, pages visited, and referring URLs.

3. Sources of Data

3.1

We collect personal data directly from you when you register for an account, complete verification, use our services, contact our support team, or communicate with us through any channel.

3.2

Purpose & Legal Basis

Why and how we process your data

We process your personal data for the following purposes, each supported by a specific legal basis under the GDPR:

Service Delivery (Contractual Necessity)

We process your data to provide our services, including account management, payment processing, crypto asset exchange, customer support, and communication about your account and transactions.

Regulatory Compliance (Legal Obligation)

This includes:

Identity verification and ongoing monitoring
Sanctions and PEP screening
Transaction monitoring for suspicious activity
Reporting to Financial Intelligence Units as required
Record-keeping for the legally mandated retention period

Analytics & Improvement (Legitimate Interest)

We use aggregated and anonymized data to analyze usage patterns, improve our platform and services, develop new features, and ensure the security and stability of our systems.

Marketing Communications (Consent)

Legal Claims (Legitimate Interest)

We may process your personal data to establish, exercise, or defend legal claims, and to protect the rights, property, or safety of Paysolo, our users, or the public.

Data Sharing with Partners (Contractual Necessity)

We share necessary personal data with our licensed payment partners and service providers to facilitate the services you have requested, subject to appropriate data processing agreements.

Risk Assessment (Legitimate Interest / Legal Obligation)

Complaints Handling (Legal Obligation / Legitimate Interest)

We process personal data to handle and resolve complaints, respond to inquiries from regulatory authorities, and maintain records of our complaint resolution processes.

Your Rights

5.1

Under the GDPR, you have specific rights regarding your personal data. We are committed to facilitating the exercise of these rights and will respond to any valid request within one month.

5.2

To exercise any of your rights, please contact us at contact@paysolo.io or support@paysolo.io. We may need to verify your identity before processing your request.

6. Our Obligations

6.1

6.2

7. Your GDPR Rights

Under the GDPR, you have the following rights:

Right of Access — You have the right to request a copy of the personal data we hold about you.
Right to Rectification — You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure — You have the right to request deletion of your personal data, subject to our legal retention obligations.
Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object — You have the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.

Commission for Personal Data Protection

Data Recipients

8.1

8.2

We do not sell your personal data to third parties. We only share data as necessary to provide our services, comply with legal obligations, or protect our legitimate interests.

Data Retention

9.1

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

9.2

Specific retention periods apply depending on the type of data:

Account and transaction data: retained for a minimum of 5 years after account closure, as required by AML regulations.
KYC documentation: retained for a minimum of 5 years after the end of the business relationship.
Marketing consent records: retained for the duration of the consent plus 3 years.

9.3

When data is no longer required, it will be securely deleted or anonymized in accordance with our data retention and destruction policies.

10. Co-Administration

10.1

In certain cases, Paysolo may act as a joint controller with its payment partners, where both parties jointly determine the purposes and means of processing your personal data.

10.2

In such cases, we ensure that:

A joint controller agreement is in place that defines each party's responsibilities
You are informed about the joint processing and your rights
You can exercise your rights with either controller

10.3

Where we act as a data processor on behalf of a partner, we process data only according to the partner's documented instructions and in compliance with a data processing agreement.

10.4

You can contact us at any time to understand how your data is processed and who the responsible controllers are.

11. International Transfers

11.1

11.2

We will only transfer personal data to countries that the European Commission has recognized as providing an adequate level of data protection, or where appropriate safeguards are in place.

12. Security Measures

Cookies & Tracking Technologies

13.1

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content.

13.2

Essential cookies are necessary for the website to function properly and cannot be disabled. They enable core functionalities such as security, session management, and accessibility.

13.3

Analytics and functional cookies help us understand how visitors interact with our website and allow us to remember your preferences. You can manage these cookies through your browser settings.

13.4

For detailed information about our use of cookies, please refer to our Cookie Policy.

Automated Decision-Making

How we use automated processing

14.1

We may use automated decision-making processes in the following contexts:

Transaction monitoring: Automated systems analyze transactions in real-time to detect patterns that may indicate fraudulent activity, money laundering, or other suspicious behavior.
Risk assessment: Automated risk scoring may be applied during onboarding and ongoing monitoring to comply with AML/KYC requirements.

14.2

Policy Updates

15.1

15.2

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

Contact & Inquiries

Paysolo O.O.D.

Data Controller

Paysolo O.O.D.
UIC: 207268330
Sofia, Bulgaria

General Contact

contact@paysolo.io

Data Protection Officer

support@paysolo.io

PrivacyPolicy

Data Questions?

Introduction

Data Controller

Scope of Data Collection

3. Sources of Data

Purpose & Legal Basis

Service Delivery (Contractual Necessity)

Regulatory Compliance (Legal Obligation)

Analytics & Improvement (Legitimate Interest)

Marketing Communications (Consent)

Legal Claims (Legitimate Interest)

Data Sharing with Partners (Contractual Necessity)

Risk Assessment (Legitimate Interest / Legal Obligation)

Complaints Handling (Legal Obligation / Legitimate Interest)

Your Rights

6. Our Obligations

7. Your GDPR Rights

Commission for Personal Data Protection

Data Recipients

Data Retention

10. Co-Administration

11. International Transfers

12. Security Measures

Cookies & Tracking Technologies

Automated Decision-Making

Policy Updates

Contact & Inquiries

Data Controller

General Contact

Data Protection Officer

PrivacyPolicy

Data Questions?

Introduction

Data Controller

Scope of Data Collection

3. Sources of Data

Purpose & Legal Basis

Service Delivery (Contractual Necessity)

Regulatory Compliance (Legal Obligation)

Analytics & Improvement (Legitimate Interest)

Marketing Communications (Consent)

Legal Claims (Legitimate Interest)

Data Sharing with Partners (Contractual Necessity)

Risk Assessment (Legitimate Interest / Legal Obligation)

Complaints Handling (Legal Obligation / Legitimate Interest)

Your Rights

6. Our Obligations

7. Your GDPR Rights

Commission for Personal Data Protection

Data Recipients

Data Retention

10. Co-Administration

11. International Transfers

12. Security Measures

Cookies & Tracking Technologies

Automated Decision-Making

Policy Updates

Contact & Inquiries

Data Controller

General Contact

Data Protection Officer

Privacy
Policy

Privacy
Policy