Privacy Policy

1. Data We Collect

• Identity & contact data: name, email address, phone number, and business details provided during registration.
• Financial data: bank account details, transaction records, and KYC/AML verification documents.
• Technical data: IP address, browser type, device identifiers, and usage logs collected automatically.

2. How We Use Your Data

• To provision, operate, and improve my-column banking infrastructure services under your agreement with us.
• To comply with applicable financial regulations, anti-money-laundering laws, and fraud prevention obligations.
• To communicate service updates, security alerts, and — where lawfully permitted — relevant product information.

3. Cookies & Tracking

We use strictly necessary cookies to authenticate sessions and maintain security. Analytics cookies (e.g. usage frequency, feature adoption) are set only with your explicit consent. You may withdraw consent or manage preferences at any time via our Cookie Settings panel.

4. Third-Party Sharing

• We share data with regulated sub-processors (cloud infrastructure, identity verification providers) under binding data-processing agreements.
• We do not sell, rent, or trade your personal data to any third party for marketing purposes.
• We may disclose data to competent authorities where required by law or valid legal process.

5. Your Rights (GDPR / CCPA)

• Access & Portability: request a copy of the personal data we hold about you in a machine-readable format.
• Rectification & Erasure: correct inaccurate data or request deletion where we have no legal obligation to retain it.
• Restriction & Objection: object to certain processing activities or request that we restrict how we use your data.
• California residents may exercise additional rights under the CCPA, including the right to opt out of any sale of personal information.

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes described above or as required by applicable law. Financial transaction records are retained for a minimum of five (5) years in compliance with AML regulations. Upon account closure, non-regulatory data is deleted or anonymised within ninety (90) days.

7. Security

my-column employs AES-256 encryption at rest, TLS 1.3 in transit, SOC 2 Type II-aligned controls, and role-based access restrictions to protect your data. In the event of a breach affecting your rights, we will notify you within 72 hours as required by GDPR Article 33.

8. Children's Privacy

my-column services are directed exclusively at businesses and individuals aged 18 or older. We do not knowingly collect personal data from persons under 18. If we become aware of such collection, we will delete the data promptly.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated by email or via an in-dashboard notice at least 14 days before they take effect. Continued use of our services after that date constitutes acceptance of the revised policy.

10. Contact & DPO

• Data Controller: my-column, Inc., 340 Pine Street, Suite 800, San Francisco, CA 94104, United States.
• Data Protection Officer: [email protected]
• EU Representative: [email protected]
• To exercise any of your rights, email [email protected] with the subject line 'Privacy Request'.