Privacy Policy
This Privacy Policy explains how Kryxo Labs ("Kryxo", "we", "us") handles personal data in connection with its website, documentation, dashboard and API (the "Platform"). We designed the Platform to process as little personal data as possible.
Our role
Kryxo is a technology provider. For personal data of our partners' end customers that is processed through the API, the Partner is the data controller and Kryxo acts as a processor, handling data only under the Partner's instructions and for the purpose of providing the Platform. For data about website visitors and partner contacts, Kryxo acts as the controller for the limited purposes described below. Card issuing, payment processing and custody are carried out by licensed partners, who are responsible for the personal data they process in that role.
Data we handle
- Contact data — if you contact us or request access, the name, email, company and message you provide.
- Account and credential data — identifiers associated with a partner account and API keys (keys are stored only as salted hashes).
- Technical logs — request metadata such as timestamp, API route, response status and source IP, kept to operate and secure the Platform.
- Processed on the Partner's behalf — operational data the Partner sends through the API (for example a card or customer identifier). Full card number, security code and PIN are rendered on the end customer's device by the secure display layer and are not stored by Kryxo.
How we use it
- to provide, operate, secure and improve the Platform;
- to respond to enquiries and manage partner relationships;
- to detect, prevent and investigate fraud, abuse and security incidents;
- to comply with legal obligations.
We do not sell personal data and we do not use it for advertising.
Legal bases
We process personal data on the basis of the performance of a contract, our legitimate interests in operating and securing the Platform, compliance with legal obligations, and, where required, consent.
Sharing
We share personal data only with: service providers that help us operate the Platform (for example hosting), under appropriate safeguards; licensed partners where necessary to deliver the service; and authorities where required by law. We do not share data with third parties for their own marketing.
International transfers
The Platform is hosted in Switzerland. Where personal data is transferred across borders, we rely on appropriate safeguards recognized under applicable data-protection law.
Retention
We keep personal data only for as long as necessary for the purposes described above or as required by law, and then delete or anonymize it. Technical logs are kept for a limited period for security and troubleshooting.
Security
We apply technical and organizational measures appropriate to the risk, including encryption in transit, restricted access, key hashing, and a design in which sensitive card data never touches partner servers or our databases.
Your rights
Subject to applicable law, you may request access to, correction or deletion of your personal data, or object to or restrict certain processing. Where Kryxo acts as processor for a Partner's end customers, such requests are directed to and handled by the Partner as controller. To exercise rights regarding data for which Kryxo is the controller, contact us using the details below.
Cookies
The public website uses only what is strictly necessary to function. It does not use advertising or third-party tracking cookies.
Changes
We may update this Privacy Policy from time to time. The effective date above shows the latest version; material changes will be notified by a reasonable means.
Contact
For privacy questions, contact us at contact@kryxo.xyz or via Telegram at @kryxo_xyz.