Privacy policy

1. Data controller

Neokraal determines the purposes and means of the processing described below. For any request: contact.neokraal@gmail.com.

2. Data collected

Identity and contact data: name or company name, email address, phone number, gender, date of birth, occupation, marital status.

Declared location data: country of residence, city, country of origin, and for companies the country of the registered office.

Verification data (KYC): supporting documents provided to confirm your identity.

Activity data: operations carried out (deposits, withdrawals, transfers, purchases, sales), amounts, dates and counterparties.

Technical data: information needed for the application to work and for the security of the service.

3. Purposes

Providing the service: maintaining the account and wallet, executing operations, connecting members on the marketplace.

Ensuring security: fraud prevention, detection of abusive use, account protection.

Meeting legal obligations, in particular regarding identity verification and retention of operation records.

Supporting members: answering requests, resolving disputes.

4. Legal bases

Performance of our contract, for the data required to operate the service.

Compliance with legal obligations, for identity verification and retention of operations.

Our legitimate interest in securing the service and preventing fraud.

5. Recipients

Within the ecosystem: the distributor handling your operation accesses the information required for it; the administrator of your country accesses the data needed for identity verification and moderation.

Technical providers: hosting of the application and database (Railway), storage of images and documents (Cloudinary), email delivery (Resend), SMS delivery (Twilio). These providers act only on our instructions.

Competent authorities, where required by law.

Your data is neither sold nor shared for advertising purposes.

6. Retention period

Account data is kept for as long as the account is active, then for the period required to meet our legal obligations.

Records of financial operations are kept in accordance with applicable legal retention periods.

Identity verification documents are kept for the time needed to carry out and evidence that verification.

7. Security

Exchanges between the application and our servers are encrypted. Passwords are never stored in clear text. Two-factor authentication is available for administrative accounts.

As no system is infallible, we encourage you to protect your credentials and to report any suspicious activity without delay.

8. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability.

Some data cannot be erased while legal retention obligations apply, in particular for financial operations.

To exercise your rights, write to contact.neokraal@gmail.com. Proof of identity may be requested.

9. Transfers outside your country of residence

Our technical providers may host data outside your country of residence. We ensure that such transfers are accompanied by appropriate safeguards.

10. Minors

The service is not intended for persons who have not reached the age of majority in their country of residence.

11. Changes to this policy

This policy may change. Any substantial change will be notified in the application.