Privacy Policy

Last Updated: January 14, 2025

TL;DR (Human Readable Summary)

We collect only the data necessary to provide our financial services and comply with laws (KYC/AML). We do not sell your data to advertisers. Your financial keys are encrypted, and our team cannot access your funds.

1. Data We Collect

When you use Novus Ledger, we collect information to verify your identity and facilitate transactions. This includes:

  • Identity Data: Name, government ID, date of birth (required for banking compliance).
  • Financial Data: Bank account numbers, wallet addresses, and transaction history synced via APIs.
  • Technical Data: IP address, browser type, and device identifiers for security logging.

2. How We Use Data

We process your personal data for the following specific purposes:

  • To provide the Platform services, including automated portfolio balancing and payroll execution.
  • To prevent fraud, money laundering, and unauthorized access to your account.
  • To improve our algorithms and user experience through aggregated, anonymized analytics.

3. Data Sharing

We do not sell your personal data. We only share data with:

Service Providers: Third-party vendors who assist with KYC verification (e.g., Onfido) or payment processing (e.g., Stripe).

Legal Authorities: When required by a subpoena, court order, or similar legal procedure.

4. Security Measures

Security is the core of our business. We employ:

  • Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit.
  • Zero-Knowledge Architecture: We do not store your private keys in plain text.
  • Access Controls: Strict role-based access control (RBAC) for our internal staff.

5. Your Rights

Depending on your location, you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, please contact our Data Protection Officer at privacy@novusledger.com.