SafeRemit Borderless

This policy explains what personal data SafeRemit collects when you use Borderless, why we collect it, and what you can ask us to do with it. It is written to be read, not to be survived.

1. What we collect

Information you give us

Account details: your name, email address and phone number.
Verification data: for individuals: date of birth, residential address, and government identity documents. For businesses: registered name, registration number, incorporation details, registered address, directors' details and identification, and beneficial ownership.
Documents you upload: certificates of incorporation, proof of address, identity documents, and the invoices you attach to transfers.
Transfer instructions: beneficiary names and bank details, amounts, currencies and any reference you add.

Information we generate or observe

Transaction records: balances, transfers, conversions, fees and references.
Device and session data: the browsers and phones used to sign in, their approximate location derived from IP address, and when they were last used, so you can spot access you don't recognise.
Technical logs: IP address, timestamps and error traces, kept for security and debugging.

We do not store your password or your transaction PIN in a readable form. Both are hashed, which means we cannot recover them, only check a value you supply against the stored hash.

2. Why we use it

To run your account: hold balances, execute the transfers and conversions you instruct, and show you your history.
To meet legal obligations: customer due diligence, sanctions and financial-crime screening, and record-keeping required of regulated payment activity. This is the reason we cannot let you send to a third party before verifying.
To keep the service secure: detect unauthorised access, rate-limit PIN attempts, and investigate suspected fraud.
To support you: answer your questions and investigate transfers that did not behave as expected.
To improve the product: understand which flows fail and where, in aggregate.

We do not sell your personal data, and we do not use your documents or transaction history for advertising.

3. Document extraction

When you upload an invoice, its contents are processed to extract the beneficiary and bank details so you do not have to retype them. This processing may be carried out by a third-party AI provider acting on our instructions. The extracted values are always presented to you for confirmation and are never acted upon without it.

4. Who we share it with

Settlement partners: the licensed institutions that execute payouts in each corridor receive the details necessary to make your payment.
Service providers: infrastructure hosting, email and messaging delivery for one-time codes, and the document-extraction provider described above. Each acts on our instructions only.
Regulators and law enforcement: where we are legally required to disclose, or to prevent or investigate financial crime.

Verification documents are accessible only to the compliance staff reviewing your account. They are not displayed back in the app after upload and are never shared with other customers.

5. Where it is stored

Data is stored on infrastructure we control, encrypted in transit. Because our partners and providers operate in different countries, your data may be transferred outside the country you live in; where that happens we rely on appropriate safeguards for the transfer.

6. How long we keep it

Verification records and transaction history are retained for the period required by financial-crime and record-keeping rules. That is typically several years after your relationship with us ends, and it applies even if you close your account. Data we hold for no legal reason is deleted when it is no longer needed.

7. Your rights

Subject to the retention obligations above, you can ask us to:

give you a copy of the personal data we hold about you;
correct data that is wrong or out of date;
delete data we no longer have a lawful reason to keep;
restrict or object to particular processing;
stop sending you non-essential communications.

Write to [email protected] from the email address on your account. We will respond within one month. If you are unhappy with our answer, you may complain to the data protection authority in your country.

8. Cookies

We use cookies that are necessary for the service to work: a session cookie that keeps you signed in, and a CSRF token that prevents another site from submitting forms as you. These cannot be turned off without breaking sign-in. We do not use advertising or cross-site tracking cookies.

9. Children

Borderless is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

10. Changes

We will post any update here with a new date at the top, and notify you in the app or by email where the change is material.

11. Contact

Privacy questions and requests: [email protected]. Security reports: [email protected].

Privacy policy