Privacy Policy

Vezmo Technology, Inc. (“Vezmo”, “we”, “us”) is a financial technology company incorporated in Delaware, United States. We decide how and why your personal information is used, so we are its “controller”.

This policy covers our website, the Vezmo app, our checkout and payment pages, our APIs and SDKs, and every Vezmo service: invoicing, proposals, contracts and other business tools; payments (VezmoPay), including where Vezmo acts as merchant of record, for card-network and settlement purposes only; Vezmo Accounts, including receiving details, conversions and sends; stablecoin; and cards.

It covers business owners and their team members, the owners, directors and controllers of a business we verify, people who pay a Vezmo business, people a business sends money to, people a business asks to sign an agreement, and visitors to our website.

When a business uses Vezmo to bill or contract with its own clients, that business decides what it collects about them and is responsible for it. We process that information to provide the service to the business, and for our own legal duties (for example, screening a payment).

To verify a person, we ask for photos of their ID document and a short video selfie. Our own software compares the face in the selfie with the photo on the document and checks that the selfie shows a real, live person. The result is a match score that our team reviews.

A business can also ask the people it sends an agreement to verify their identity this way before they sign. Then the business that sent the agreement, not our team, sees the result, the photos and the video, and reviews any check our software cannot settle.

This involves biometric information. We ask for your explicit consent before any capture starts, and we record which version of the consent you agreed to. We use it only to verify your identity, to prevent fraud and to meet the law. We never sell it and never use it for marketing. We don’t use your photos to build a face-search database. The face measurements our software makes for the comparison exist only while the check runs and are not stored.

If you can’t or don’t want to take a video selfie, write to us before you start. We will offer another way to verify you where we and our partners can accept it, such as a manual check, which can take longer.

We keep the images and the result with your verification record and delete them on the schedule under “How long we keep information”. You can withdraw your consent at any time by writing to us. If you do, we can’t verify you, and services that need verification will stop. Records the law requires us to keep are kept until that duty ends.

When someone pays a Vezmo business, we receive their name, email, billing address, the amount and currency, the payment method used, and device and fraud signals. Card numbers are entered into our payment processor’s secure fields; we don’t store full card numbers. Some payment methods require a national tax number (for example, a CPF for Pix in Brazil).

For Vezmo Accounts we keep each balance, receipt, conversion and send, including the sender or recipient and their account details.

For stablecoin we keep the network, wallet addresses and transaction references. For a transfer of $1,000 or more we also keep who sent or received it, as the “Travel Rule” and our partners require, and pass those details to our partners and to the service at the other end of the transfer.

For cards (when available) we and the card issuer keep card transactions, merchants, limits and card controls.

We use AI services to read the documents you upload (for example, to pull the name and number from an ID, or the account holder from a statement) and to look for signs that a document was edited. Our systems also score payments and activity for fraud and match names against sanctions lists.

These checks help our team; they don’t decide alone. A person on our team reviews before we refuse to verify a business or close an account because of them. Some protections act at once while a person reviews, such as holding a payment that matches a sanctions list.

Under our agreements with them, the AI services we use process documents for us only and may not use them to train their own models. If you think an automated check got something wrong, ask us to review it.

We share only what each recipient needs:

We don’t sell personal information for money, and we don’t use advertising cookies at this time. Analytics cookies on our website are set only after you accept them, and we honour the Global Privacy Control signal; see “Your rights”.

We are based in the United States and our partners and service providers work in several countries. Your information may be processed outside the country where you live. Where the law requires, we protect transfers with safeguards such as the European Commission’s standard contractual clauses or the UK addendum to them.

Depending on where you live, you may have the right to: know what we hold and get a copy; correct it; delete it; restrict or object to how we use it; receive it in a portable format; withdraw consent; and not be treated unfairly for using these rights.

We may need to keep some information even after you ask us to delete it, such as records anti-money-laundering or tax law requires, or information needed for a dispute.

EEA and UK: we rely on contract (to provide the service), legal obligation (verification, screening, record keeping, tax), legitimate interests (security, fraud prevention, improving the service) and consent (biometric verification, some cookies and marketing). You can complain to your local data protection authority.

California and other US states: you can ask to know, delete or correct your information, and opt out of “sale” or “sharing” for targeted advertising (we do none at this time) by writing to us or with Cookie settings in our website footer, as our Cookie Policy describes. We honour the Global Privacy Control signal. We use sensitive information (such as ID numbers and biometric information) only to provide the service, verify identity and prevent fraud.

India, Brazil and other countries: you have the rights your local law gives you, including to access, correct and erase your information and to raise a grievance with us. Write to the address below; we answer within the time your law sets.

To use a right, write to privacy@vezmo.com from the email on your account. We confirm who you are before acting and answer within one month, or sooner where your law requires. If a request is complex we may take up to two more months and will tell you why.

We protect information with encryption in transit and at rest, access limited by role, monitoring and regular testing. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires. More on our Security & Compliance page.

Vezmo is for adults running a business. You must be at least 18 to use it, and we don’t knowingly collect information about children. If you think we have, write to us and we will delete it.

We post every change here with a new date and version. If a change materially affects how we use your information, we tell you by email or in the app at least 30 days before it takes effect, unless the law requires a faster change. We won’t use information we already hold in a materially different way without your consent where the law requires it.

Privacy questions and requests: privacy@vezmo.com