1. What we collect
Identity data: name, date of birth, nationality, and the identity documents you upload.
Contact data: email address, phone number and postal address.
Financial data: account balances, transactions, transfers, card activity and loan history.
Technical data: IP address, device and browser information, and sign-in events.
2. Why we use it
To provide the service you asked for — running your accounts, moving your money and issuing cards.
To meet our legal obligations, including identity verification, anti-money-laundering checks and sanctions screening.
To detect and prevent fraud, which is a legitimate interest of ours and of every other customer.
To communicate with you about your account. Marketing messages are only sent with your consent and you can withdraw it at any time.
3. Who we share it with
Our custodian bank and payment partners, to move your money.
Identity verification and fraud prevention providers.
Regulators and law enforcement where we are legally required to.
We do not sell your personal data. We never have and we will not.
4. How long we keep it
We keep account and transaction records for at least seven years after your account closes, because financial regulation requires it. Identity documents are kept for five years after closure and then deleted.
5. Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it where we are not legally required to keep it.
You can object to processing based on legitimate interests, and withdraw marketing consent at any time from Settings → Notifications.
To exercise any of these, email support@nexacapital.com. We will respond within 30 days.
6. Security
All traffic is encrypted with 256-bit TLS. Data at rest is encrypted, identity documents are held in private storage, and access is limited to staff who need it for their role. Every privileged action is logged.
Questions about this document? Email support@nexacapital.com or write to NexaCapital Holdings, 1 Harbour Exchange, New York, NY 10004.