Legal

Privacy Policy

Last updated: April 20, 2026

1. Introduction

Fintradax ("we," "our," or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, use our platform, or interact with our services.

Fintradax is a trading name of InnoMotus, registered in the Netherlands. InnoMotus operates as the data controller under the General Data Protection Regulation (GDPR). Our registered office is located in Amsterdam, Netherlands.

2. Data We Collect

2.1 Information you provide directly

When you use our website or services, we may collect the following personal data:

  • Contact form submissions: name, email address, company name, and message content.
  • Account registration: name, email address, password (encrypted), company name, and billing information.
  • Compliance data: when using our KYC/KYB/AML tools, you or your clients may submit identity documents, corporate documents, and ownership information. This data is processed on behalf of your organisation.

2.2 Information collected automatically

  • Usage data: pages visited, time spent, referral source, and interactions with the platform.
  • Device data: browser type, operating system, screen resolution, and IP address.
  • Cookies: we use essential cookies for language preferences and session management. See Section 7 for details.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To respond to enquiries submitted via the contact form.
  • To create and manage your account on the Fintradax platform.
  • To provide KYC, KYB, and AML compliance services as requested.
  • To process payments and manage subscriptions.
  • To send transactional communications (verification emails, account notifications).
  • To improve our website and services based on usage patterns.
  • To comply with legal obligations, including anti-money laundering regulations.

4. Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

  • Contract performance: to provide the services you have subscribed to.
  • Legal obligation: to comply with EU anti-money laundering directives (AMLD5/6), the Dutch Wwft, and other applicable regulations.
  • Legitimate interest: to improve our services, prevent fraud, and ensure platform security.
  • Consent: where required, such as for optional marketing communications.

5. Data Sharing

We do not sell your personal data. We may share data with the following categories of recipients:

  • Payment processors: Stripe processes payment data under their own privacy policy, in compliance with PCI DSS.
  • Identity verification providers: to perform KYC checks on behalf of your organisation.
  • Sanctions and PEP screening providers: to conduct AML screening as part of the compliance pipeline.
  • Hosting providers: our infrastructure is hosted within the European Union.
  • Legal authorities: when required by law or in response to valid legal process.

All third-party processors are bound by data processing agreements in accordance with GDPR Article 28.

6. Data Storage and Security

All personal data is processed and stored within the European Union. We implement the following security measures:

  • 256-bit TLS encryption for all data in transit.
  • AES-256 encryption for all data at rest.
  • Strict tenant isolation — each client's data is stored in a separate, isolated environment.
  • Encrypted API keys and credentials.
  • Regular security audits and vulnerability assessments.

7. Cookies

We use the following cookies:

  • ftx_lang — stores your language preference (English, German, or French). Duration: 1 year. Essential.
  • Session cookies — maintain your login state when using the platform. Duration: session. Essential.

We do not use advertising cookies or third-party tracking cookies.

8. Data Retention

We retain your data for the following periods:

  • Contact form submissions: 12 months, unless a business relationship is established.
  • Account data: for the duration of your subscription, plus 30 days after account closure.
  • Compliance data (KYC/KYB/AML): as required by applicable anti-money laundering regulations (typically 5 years after the end of the business relationship).
  • Invoices and billing records: 7 years, in accordance with tax regulations.

9. Your Rights

Under GDPR, you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate data.
  • Erasure: request deletion of your data, subject to legal retention obligations.
  • Restriction: request that we limit how we process your data.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@fintradax.com. We will respond within 30 days.

10. International Transfers

We do not transfer personal data outside the European Economic Area (EEA). All data processing and storage takes place within the EU.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users or by prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Fintradax
Amsterdam, Netherlands
info@fintradax.com

You also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.