Privacy Policy & Regulatory Governance

1. Scope & Commitment

Cycloverse Bank ("the Institution", "we", "us") places the highest priority on ensuring client privacy and absolute data integrity. This Privacy Policy details our practices concerning information gathering, identity verification under international Know Your Customer (KYC) standards, and transaction security.

This policy governs all digital interactions across our web console, mobile interfaces, API communication channels, and offline communications.

2. Categories of Information Collected

In order to deliver sovereign financial services and fulfill statutory obligations, we collect:

• Biographical Identification: Legal full name, date of birth, passport/national identity documents, tax identification numbers.
• Verification & Address: Certified proof of residency, utility documentation, and corporate registry filings.
• Financial & Transactional Records: Account balances, transaction timestamps, counterparty account identifiers, SWIFT remittance receipts.
• Telemetry & Security Signals: Cryptographic session tokens, device fingerprinting, and IP geolocational signals for fraud prevention.

3. Lawful Basis for Data Processing

Processing is conducted exclusively under lawful mandates:

• Fulfillment of depository, wire transfer, and liquidity management agreements.
• Compliance with mandatory statutory AML/CFT (Counter-Financing of Terrorism) legislation.
• Protection of client assets through automated anomaly detection and behavioral telemetry.

4. Cross-Border Settlement Disclosures

We never commercialize, license, or monetize client personal data. Client transaction records are communicated exclusively to licensed correspondent clearing banks, SWIFT network operators, and regulatory authorities where legally obligated.

5. Cryptographic & Physical Security

All client data at rest is encrypted using AES-256 GCM encryption. Communications in transit are forced through TLS 1.3 cryptographic tunnels with HSTS preloading. Access to production data vaults requires multi-signatory hardware keys and biometric authentication.

6. Individual Data Rights

Clients retain statutory rights to request copies of their data profiles, demand rectification of erroneous information, or submit formal requests regarding retention schedules, subject to applicable banking retention statutes.