Privacy Policy

01Introduction

Stratos Fintech LLC ("Stratos Fintech", "we", "us", or "our") is committed to protecting the privacy and personal data of individuals who interact with stratosfin.io. This Privacy Policy explains how we collect, use, store, disclose and protect your personal information, in accordance with GDPR-aware principles for international visitors.

02Information we collect

Identity data: name, government ID / passport number (where required for KYC).
Contact data: email address, phone number, postal address.
Technical data: IP address, browser type, operating system, pages visited, and cookies.
Correspondence data: messages sent through our contact form or by email.
Business data: company name and transaction information where applicable.

03How we use your information

Responding to enquiries and support requests.
Providing, maintaining and improving our technology platforms and services.
Complying with legal and regulatory obligations, including AML/KYC requirements.
Sending service updates and important notices.
Detecting and preventing fraud, security breaches and unlawful activity.
Analysing usage patterns to enhance the user experience.

We do not sell, rent or trade your personal information to third parties for marketing purposes.

04SMS and mobile messaging

If you provide a mobile number and tick the SMS consent box on signup, or enrol SMS two-factor authentication in the portal, Stratos Fintech LLC may send transactional SMS to that number: verification codes, account notices (such as KYC status) and fraud/security alerts. We do not send marketing SMS and we do not buy phone lists. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. You can also contact support@stratosfin.io. Browsing the website does not require SMS. Creating an account requires a mobile number and a one-time verification text, and that text is sent only after you tick the box. The box starts unchecked.

Stratos Fintech LLC (Wyoming filing 2026-002071705, EIN 30-1507888) sends US and Canadian transactional texts from +1 269 307 7980. Toll-free +1 844 970 0705 is also registered to this company for the same programme. The company is wholly owned by STRATOS FINTECH (PRIVATE) LIMITED (SECP CUIN 0345801), which operates https://www.stratosfin.pk. Pakistani mobiles are texted by that parent from short code 8584, not from the US numbers.

SMS terms: Mobile Terms of Service. How consent is collected: SMS opt-in.

05Legal basis for processing

Your consent, where explicitly provided.
Performance of a contract or pre-contractual steps at your request.
Compliance with legal obligations applicable to us.
Our legitimate interests in operating a secure, compliant fintech technology business.

06International and GDPR considerations

Where we process personal data of individuals in the UK or European Economic Area, we apply GDPR-aligned safeguards including purpose limitation, data minimisation, retention controls, and appropriate transfer safeguards. International merchants may be asked to complete onboarding documentation and processing-protection acknowledgements before services are activated (once licensed and operational).

We may share information with:

Service providers who assist in operating our websites and platforms (under data processing agreements).
Regulatory and law enforcement authorities when required by law, court order or regulatory directive.
Professional advisers (lawyers, auditors) under confidentiality obligations.

08Processors and recipients

These organisations receive personal data from us, only for the purpose shown and under a data processing agreement or the recipient's own licence:

Shufti Pro: Identity and business verification, with AML, PEP and sanctions screening.
Vercel: Hosting of the website, the control panel and the app's server.
Neon: The database that holds account and payment records.
Resend: Transactional email.
Anthropic: Fin, the assistant, when a person asks it something (no card data).
Twilio: Text messages (codes and account notices).
Our licensed partners: Acquiring, safekeeping, settlement and payout of funds; named here once agreements are signed.

Screening against the UN Security Council consolidated list, the OFAC sanctions lists and other applicable lists uses your name, date of birth and nationality, and a business's name and its owners' and directors' names.

09Data retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Regulatory and transaction records may be retained for a minimum of five (5) years, or longer where the applicable law requires it.

10Data security

We implement appropriate technical and organisational measures including encryption in transit and at rest, access controls, firewalls, and regular security assessments.

11Your rights

Access a copy of your personal data we hold.
Request correction of inaccurate or incomplete data.
Request deletion where there is no lawful basis for continued processing.
Withdraw consent at any time (where processing is consent-based).
Lodge a complaint with the relevant authority.

To exercise these rights, contact support@stratosfin.io.

12Cookies

See our Cookie Policy for details of cookies and similar technologies.

13Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new version number and date.

14Contact

Stratos Fintech LLC
Registered Agents Inc, 30 N Gould St Ste R, Sheridan, WY 82801, United States, Service of process only — not a Stratos staff office
Email: support@stratosfin.io