Privacy Policy
Introduction
Welcome to Graishat.
Graishat ('Graishat', 'we', 'our', or 'us') is a financial services platform owned and operated by Kmbal Ltd. Graishat provides international money transfer, digital asset, payment, wallet, and related financial services through regulated financial institutions, licensed payment providers, banking partners, and authorized third-party service providers, including Coinme Inc. for eligible digital asset services in the United States.
This Privacy Policy explains how we collect, use, disclose, store, transfer, and protect your personal information when you use the Graishat website, mobile application, APIs, customer support channels, or any related services (collectively, the 'Services').
By creating a Graishat account or using our Services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to:
- Graishat mobile applications
- Graishat website
- Customer accounts
- International money transfers
- Digital asset services
- Wallet services
- Payment services
- Customer support interactions
- Marketing communications
- Identity verification
- Compliance screening
Information We Collect
We collect information necessary to provide our Services, comply with applicable laws, prevent fraud, and improve your experience.
Personal Information
Depending on the Services you use, we may collect:
- Full legal name
- Date of birth
- Residential address
- Mailing address
- Email address
- Mobile phone number
- Nationality
- Occupation
- Employer information where required
- Tax Identification Number where legally required
- Social Security Number or the last four digits where required by law
- Government-issued identification details
- Passport information
- Driver's license information
- State identification card information
- Selfie photographs
- Biometric verification information where permitted by applicable law
Financial Information
To provide our Services we may collect:
- Bank account information
- Payment card information processed by authorized payment providers
- Wallet addresses
- Transaction history
- Source of funds
- Source of wealth where required
- Currency exchanged
- Payment methods
- Account balances
- Transaction references
- Fees charged
- Exchange rates
Transaction Information
Whenever you send or receive funds we collect information including:
- Sender information
- Recipient information
- Destination country
- Receiving institution
- Transaction amount
- Currency
- Exchange rate
- Fees
- Transaction status
- Blockchain transaction hash where applicable
- Date and time
- Transaction reference number
Device Information
When you access our Services we automatically collect:
- IP address
- Browser type
- Operating system
- Device model
- Device identifiers
- Mobile application version
- Language settings
- Login history
- Session identifiers
- Device fingerprint
- Approximate location
- Network information
Cookies and Similar Technologies
Graishat uses cookies and similar technologies to:
- Remember your preferences
- Keep you signed in
- Improve website performance
- Measure usage
- Detect fraud
- Personalize content
- Support analytics
- Improve security
You may disable cookies through your browser settings, although some Services may not function correctly.
How We Use Your Information
We use your information to:
Legal Basis for Processing
Where applicable, we process your personal information because:
- It is necessary to perform our contract with you.
- It is necessary to comply with legal and regulatory obligations.
- It is necessary to protect our legitimate business interests.
- You have provided your consent where required by law.
Identity Verification and Compliance
As a regulated financial services provider, Graishat must verify your identity before providing certain Services. We may request:
- Government-issued identification.
- Proof of address.
- Selfie verification.
- Source of funds documentation.
- Source of wealth documentation.
- Employment information.
- Business ownership information.
- Additional documents required by law.
Identity verification may be completed by Graishat or by approved third-party identity verification providers.
Failure to provide requested information may result in delayed, restricted, suspended, or terminated Services.
Fraud Prevention and Financial Crime Monitoring
Graishat monitors transactions to detect:
Sharing Your Information
We may share your information only where necessary to provide our Services or comply with legal obligations.
International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence, including the United States and other jurisdictions where Graishat, Kmbal Ltd, Coinme, or our authorized service providers operate.
Where required by applicable law, we implement contractual, technical, and organizational safeguards to protect your information during international transfers.
Data Security
But I must explain to you how all this mistaken idea of denouncing pleasure and praising pain was born:
Encryption
Encryption in transit and at rest.
Multi-factor
Multi-factor authentication.
Access controls.
Access controls.
Security monitoring.
Security monitoring.
Audit logging.
Audit logging.
Infrastructure
Secure cloud infrastructure.
Employee
Employee confidentiality obligations.
Security
Regular security testing.
Although we take reasonable steps to protect your information, no method of transmission or storage is completely secure.
Data Retention
We retain your information only for as long as necessary to:
- Provide our Services.
- Comply with legal obligations.
- Resolve disputes.
- Enforce our agreements.
- Prevent fraud.
Where required by financial regulations, identity and transaction records may be retained for a minimum of five to seven years after the end of the customer relationship, depending on applicable legal requirements.
Your Privacy Rights
Subject to applicable law, you may have the right to:
Access Your Data
Access your personal information.
Correct Your Data
Correct inaccurate information.
Processing Activity
Restrict certain processing activities
Object to specific processing.
Object to specific processing.
Retreive Your Data
Receive a copy of your personal information.
Withdraw
Withdraw consent where processing is based on consent.
Marketing
Opt out of marketing communications.
Requests may be submitted through the Graishat application or by contacting our Privacy Team.
Children's Privacy
Graishat Services are intended only for individuals who are at least 18 years of age.
We do not knowingly collect personal information from children.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or business operations.
Material changes will be communicated through the Graishat application, website, email, or other appropriate communication channels.
Need Help?
If you have questions, requests, or complaints regarding this Privacy Policy, please contact:
Customer Acknowledgment
By creating a Graishat account or using any Graishat Service, you acknowledge that you have read, understood, and agreed to this Privacy Policy and consent to the collection, use, disclosure, and processing of your personal information as described herein.