Where your documents live, for how long, and who can see them.

What we collect

Your identity document and a selfie, your address, contact details, the invoices and contracts you upload, the bank details of your beneficiaries, your wallet addresses and transaction hashes, and the usual technical data of a website (IP address, device, pages visited). For companies: registry documents, directors and beneficial owners.

Where it is stored

Documents and verification data are kept in access-controlled storage separate from the website; only the people who process your order and your verification can open them.

For how long

Five years after your last payment or after the account is closed, because anti-money-laundering rules require it. After that the files are deleted and the record of deletion is kept. Website analytics data is kept for 14 months.

Who can see it

• The desk staff who verify you and process payments; each access is limited to what the order needs.
• The banks that execute your transfer see the beneficiary details and the purpose; they do not see your documents unless they ask for them to release a specific payment.
• Our bank and our licensed conversion partners see the beneficiary details and the purpose of a payment; sanctions-list checks are done by our own desk.
• Authorities, when the law requires a report or a response to a lawful request. We do not tip off, and we keep a record of every request.
• Nobody else. We do not sell data, share it with advertisers, or use it to train models.

How it is protected

Access limited to the people who process your order; documents kept separate from the website, with backups. An independent security review of the client cabinet is planned before the self-service launch.

Your choices

• Export: write to privacy@arkipopay.com and receive your documents and payment history within 5 business days.
• Correct: update contact details yourself; identity data is corrected by re-verification.
• Delete the account: write to privacy@arkipopay.com. Active orders must finish first. We keep what the law requires for five years, then delete it; everything else is deleted within 30 days.
• Object or complain: write to privacy@arkipopay.com; we answer within 15 days. The supervisory authority is named in the policy.

Cookies

Necessary cookies remember your language and theme; they need no consent. Analytics cookies are set only after you accept them on the banner, and you can withdraw at any time from the footer. We do not use advertising cookies.

Who is responsible

PT Global Payment Gateway (NIB 2412240053279), Graha Merdeka, Jalan Merdeka, Denpasar 80239, Bali, Indonesia, trading as Arkipo. Data questions: privacy@arkipopay.com.