Privacy Policy

1. Controller

The data controller is Guarapay Pte. Ltd., registration UEN 202500000X, Singapura. Data protection officer (DPO): support@guarapay.io.

2. Data we collect

• Sign-up: name, date of birth, CPF or foreign ID, e-mail, phone or Telegram account.
• Identity check: images of your document and, when required, a selfie to confirm you are the account holder.
• Card use: top-ups, purchases, withdrawals, wallet addresses and blockchain transaction hashes.
• Device and browsing: IP, device and browser type, language, pages visited and cookies (see section 8).
• Support: messages exchanged with support.

3. How we use it

• Open and keep your account, issue the card and process top-ups, purchases and withdrawals — performance of contract.
• Verify identity, prevent money laundering and fraud, respond to authorities — legal and regulatory obligation.
• Protect the account, detect misuse and improve security — legitimate interest.
• Measure site usage with analytics cookies — consent, which you can withdraw at any time.
• Send transaction notices and changes to the Terms — performance of contract.

4. Who we share it with

• The card issuer (to be provided) and the Visa network, to issue the card and process payments.
• Identity verification and blockchain transaction analysis providers.
• Cloud and support providers acting on our behalf under contract.
• Public authorities, when required by law or court order.

We do not sell your personal data.

5. International transfer

Some partners may process data outside Brazil. In those cases we use the safeguards of article 33 of the LGPD, such as contractual clauses.

6. How long we keep it

While your account is active and, after closure, for the period required by law — for example at least 5 years for transaction records (Law 9,613/1998). After that, data is deleted or anonymised.

7. Your rights

• Confirm whether we process your data and access it.
• Correct incomplete or outdated data.
• Request anonymisation, blocking or deletion of unnecessary data.
• Portability to another provider.
• Know who we share it with.
• Withdraw consent and know the consequences of not giving it.
• Complain to the National Data Protection Authority (ANPD).

To exercise your rights, write to support@guarapay.io or contact support on Telegram: @guarapay_support_bot.

8. Cookies

• Necessary: keep the site working and remember your choices, such as language, theme and this cookie preference. Always on.
• Analytics: help us understand how the site is used. Only with your consent.

You can change your choice at any time under “Cookie preferences” in the site footer, or delete cookies in your browser.

9. Security

We use encryption in transit, access control and monitoring. Full card details are shown only in the app, after confirmation.

10. Changes

We may update this Policy. The current version always lives on this page with its update date; material changes are announced in the app.