Privacy Policy

1. Introduction

Wexbrone Institutional Operations Ltd. (“Wexbrone,” “we,” “us,” or “our”) provides digital banking infrastructure, ledger management, and private custody accounts. This Privacy Policy outlines our procedures concerning the collection, storage, use, and disclosure of personal and financial information when you access or interact with our web applications, client portals, APIs, and associated online services (collectively, the “Service”).

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you must refrain from using the Service.

2. Information We Collect

To maintain regulatory compliance and deliver financial ledger functionality, we collect several categories of information:

• Account & Registration Information: Legal full name, preferred display name, verified email address, telephone number, mailing address, and unique system-assigned identifiers (such as your 10-digit account number).
• Identity Verification Data: Identification documentation, tax identification numbers, date of birth, proof of address, and verification tokens used to confirm onboarding legitimacy and authorized roles.
• Transaction & Ledger Data: Source and recipient account numbers, transfer amounts, transaction memos, references, counterparty institutions, transaction timestamps, and authoritative running balances.
• Device & Usage Information: IP addresses, browser specifications, operating system versions, access timestamps, referral URLs, session durations, and security event logs recorded during your authenticated sessions.

3. How We Use Your Information

We process personal and financial data strictly for legitimate operational, security, and contractual purposes:

• Service Delivery: Maintaining your accounts, executing deposits and transfers, updating account balances, and generating transaction statements.
• Security & Fraud Prevention: Detecting unauthorized logins, preventing identity theft, validating session signatures, and securing internal transfers.
• Regulatory & Legal Compliance: Complying with applicable Know-Your-Customer (KYC), Anti-Money Laundering (AML), banking recordkeeping, and lawful authority requests.
• Operational Communications: Delivering vital account notifications, security confirmations, verification links, and customer support responses.

4. Legal Basis for Processing

Our processing of personal data is grounded in clear legal bases, including:

• Contractual Necessity: Processing required to establish and service your banking accounts and execute requested financial transactions.
• Legal Obligations: Compliance with statutory financial directives, accounting mandates, and regulatory oversight standards.
• Legitimate Interests: Protecting the integrity and security of the Wexbrone platform, mitigating systemic fraud, and improving operational stability.
• Consent: Where explicitly requested for particular optional communications or account capabilities.

5. How We Share Information

We disclose information solely under the following controlled conditions:

• Vetted Service Providers: Cloud infrastructure hosts, encrypted database systems, identity verification networks, and transactional messaging providers operating under strict confidentiality covenants.
• Regulatory & Legal Authorities: Government agencies, financial oversight bodies, or law enforcement officials where required by compulsory legal process, subpoena, or enforceable statute.
• Corporate Restructuring: Legitimate successors in interest in connection with an institutional reorganization, corporate merger, or asset divestiture, subject to appropriate privacy continuity.

6. Data Security

Wexbrone enforces multi-layered technical, physical, and organizational safeguards designed to protect sensitive financial records:

• Encryption: Industry-standard TLS 1.3 encryption for data in transit and AES-256 cryptographic standards for all database records at rest.
• Credential Protection: Passwords, security PINs, and authentication keys are cryptographically salted and hashed using modern one-way key derivation algorithms; credentials are never retained in plain text.
• Access Controls & Isolation: Strict row-level tenancy controls, least-privilege administrative access controls, and role-based operational permissions.
• Monitoring & Audit: Continuous automated anomaly detection, centralized immutable logging, and periodic security evaluations.

7. Data Retention

We retain personal data and ledger entries only for as long as necessary to fulfill the purposes set out in this policy, service active accounts, and satisfy mandatory financial record retention laws (which commonly mandate retention periods between five and ten years following account closure). When retention is no longer required, data is permanently erased or irreversibly anonymized in accordance with industry disposal standards.

8. Your Rights

Depending on your location and jurisdiction, you may hold specific statutory rights regarding your personal information, including:

• Access: The right to request an extract of the personal data we hold concerning your identity and accounts.
• Correction: The right to request correction of inaccurate, incomplete, or outdated records.
• Deletion: The right to request erasure of personal data, subject to statutory banking retention requirements.
• Objection & Restriction: The right to contest or restrict specific data processing workflows.
• Data Portability: The right to obtain your transaction history and account profiles in a structured, machine-readable format.

To exercise any applicable right, please submit a verified request to our compliance team at support@wexbrone.com.

9. Cookies and Tracking Technologies

The Wexbrone platform utilizes strictly necessary session cookies and token-based storage mechanisms required for secure authentication, CSRF mitigation, and persistent application state. We do not deploy third-party advertising cookies, cross-site tracking pixels, or invasive behavioral behavioral trackers.

10. International Transfers

Wexbrone operates globally distributed server infrastructure. Consequently, your data may be transferred to, stored, and processed in jurisdictions other than your country of residence. Where cross-border transfers occur, we implement recognized contractual safeguards and industry-standard data security agreements to ensure equivalent protection.

11. Children's Privacy

Our banking platform and digital accounts are exclusively intended for individuals who have reached the age of majority in their applicable jurisdiction. We do not knowingly solicit, collect, or retain data from minors under eighteen (18) years of age. Any account found to belong to a minor will be closed and associated data purged in compliance with applicable law.

12. Changes to This Policy

We reserve the right to amend this Privacy Policy periodically to reflect legal modifications, regulatory guidelines, or functional service updates. When material adjustments occur, we will post the revised policy with an updated “Last updated” timestamp and notify active clients via in-app dashboard advisory or registered electronic mail. Continued use of the Service after effective dates signifies acceptance of the revised policy.