At IDYC360, your privacy and the security of your data are fundamental to building trust with our customers, partners, and users.

This Privacy Policy outlines how we collect, use, share, and protect your information across our platform, website, and related services.

By accessing or using our services, you agree to the terms of this policy.

Who We Are

IDYC360 is a unified, AI-powered compliance platform serving financial institutions and regulated businesses globally.

We are committed to handling all personal data in accordance with applicable privacy regulations, including:

  • General Data Protection Regulation (GDPR) (EU/EEA)
  • UK Data Protection Act 2018
  • California Consumer Privacy Act (CCPA) (US)
  • Other local regulations, as applicable

Reasons for collecting and processing user personal information

We may collect the following types of information depending on how you interact with our platform or website:

Personal Information

  • Name, email address, phone number
  • Job title, company, country
  • Contact preferences
  • Information submitted via forms, demo requests, or support inquiries

Usage Data

  • IP address
  • Device and browser type
  • Pages visited, session duration, interaction logs
  • Referral sources and campaign activity

Platform Data (for Customers)

If you are an authorized platform user, we may process data on behalf of your institution, including:

  • User activity logs
  • Compliance and screening results
  • Case management metadata
  • Customer profiles and actions

This data is processed in accordance with data processing agreements and applicable laws.

How We Use Your Information

We use your data to:

  • Provide, operate, and improve our services
  • Respond to inquiries, demo requests, and support tickets
  • Send service updates, newsletters, or compliance insights (with opt-out options)
  • Improve platform usability and performance
  • Maintain platform security, detect fraud, and comply with legal obligations

We do not sell or rent your personal information.

Legal Basis for Processing (GDPR)

Where applicable, we rely on one or more of the following legal bases:

  • Consent (e.g., for marketing communications)
  • Contractual necessity (e.g., providing access to our platform)
  • Legitimate interest (e.g., improving platform functionality)
  • Legal obligation (e.g., fraud detection or compliance)

How We Share Information

We only share your information with:

  • Trusted service providers who support our infrastructure, communications, or analytics, under strict confidentiality agreements
  • Regulatory authorities or legal bodies, when required by law
  • Our group companies or partners, for relevant business operations (with safeguards in place)

We do not allow third-party access to your data for their own commercial purposes.

Data Storage & Retention

  • We host our data in secure, access-controlled environments using reputable global cloud providers
  • Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy, or to meet legal/regulatory obligations

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Request access to your personal data
  • Correct or delete inaccurate or outdated information
  • Withdraw consent for marketing
  • Object to or restrict certain types of processing
  • Lodge a complaint with a supervisory authority (EU/UK residents)

To exercise your rights, contact us at [email protected]

Cookies & Tracking Technologies

Our website uses cookies and similar tools to improve user experience, analyze traffic, and personalize content.

You can control cookie preferences through your browser settings or via our cookie management banner.

International Data Transfers

If we transfer data outside your jurisdiction (e.g., from the EU/UK to the US), we implement appropriate safeguards, such as:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements (DPAs)
  • Technical and organizational security measures

Security Measures

We take data security seriously and implement:

  • Role-based access controls
  • Data encryption in transit and at rest
  • Regular audits and vulnerability assessments
  • Incident response protocols

However, no system is completely secure. You are responsible for keeping your credentials confidential.

Children’s Privacy

IDYC360’s platform is not intended for individuals under 18. We do not knowingly collect personal data from minors.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The revised version will be posted with an updated “Last Updated” date.

Contact Us

Have questions about this policy or your data?

Reach out to our privacy team:[email protected]