TetraFi Ltd ("TetraFi", "we", "us", or "our") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform and services.

TetraFi operates as a non-custodial settlement infrastructure provider for institutional digital asset transactions. We process personal data in connection with identity verification (KYC/KYB), compliance checks, and transaction settlement.

Identity Verification Data: Name, business registration details, registered address, director information, and government-issued identification documents as required for KYC/KYB verification via our partner Sumsub.

Transaction Data: Wallet addresses, transaction amounts, settlement details, compliance check results, and audit trail records generated during the settlement process.

Technical Data: IP addresses, browser type, device information, and usage analytics collected through our platform for security monitoring and service improvement.

Communication Data: Email addresses and correspondence records when you contact us or subscribe to our communications.

We use your data to: (a) verify your identity and conduct due diligence as required by applicable regulations; (b) process and settle transactions through our escrow and DvP mechanisms; (c) conduct sanctions screening via Chainalysis; (d) transmit Travel Rule information via Notabene as required by FATF Recommendation 16; (e) generate compliance evidence for our WORM audit ledger; (f) communicate with you about your account and our services.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

We share data with: Sumsub (identity verification), Chainalysis (sanctions screening and transaction monitoring), Notabene (Travel Rule compliance and IVMS101 data transmission), Beeks Group (infrastructure hosting), and applicable regulatory authorities when legally required.

All data sharing is governed by data processing agreements that meet GDPR standards. We do not transfer data outside the EEA without appropriate safeguards.

We retain identity verification data for the duration of your business relationship plus 5 years, as required by anti-money laundering regulations.

Transaction records and compliance evidence stored in our WORM ledger are retained for a minimum of 5 years in accordance with MiCA and applicable financial record-keeping requirements.

Technical and analytics data is retained for 12 months unless required for security investigations.

Under GDPR, you have the right to: access your personal data; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); restrict processing; data portability; and object to processing.

To exercise your rights, contact us at privacy@tetrafi.io. We will respond within 30 days.

Note: Certain data stored in our WORM compliance ledger cannot be deleted due to regulatory requirements. We will inform you if a deletion request is subject to this limitation.

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, security monitoring, and regular security assessments.

Our infrastructure is hosted on Beeks Group's institutional-grade private cloud, co-located in regulated financial data centres.

TetraFi Ltd, 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF.

Privacy inquiries: privacy@tetrafi.io

General inquiries: enquiries@tetrafi.io