Privacy Policy

1. Data We Collect

We collect account registration data (name, email, company), API usage metadata (request logs, timestamps, IP addresses), and billing information (processed via third-party payment processors — we do not store raw card numbers).

We also collect browser/device data automatically via cookies and similar tracking technologies when you access dashboard-airwallex.

2. How We Use Your Data

To provide, operate, and improve the dashboard-airwallex platform — including API key management, security alerting, and audit logging.

To communicate service updates, security notices, and (with consent) product announcements.

To comply with legal obligations and enforce our Terms of Service.

3. Cookies & Tracking

We use strictly necessary cookies to maintain your authenticated session, and analytics cookies (e.g., first-party telemetry) to understand feature usage.

You may manage cookie preferences via your browser settings or our Cookie Preference Centre. Disabling strictly necessary cookies will prevent login.

4. Third-Party Sharing

We share data only with sub-processors necessary to deliver the service (cloud hosting, payment processing, error monitoring). We do not sell your personal data.

All sub-processors are contractually bound to data protection standards consistent with applicable law. A current list is available upon request.

5. Your Rights (GDPR & CCPA)

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate data.
• Erasure: request deletion of your data where no legal basis for retention exists.
• Portability: receive your data in a machine-readable format.
• Opt-out (CCPA): California residents may opt out of any sale of personal information (we do not sell data).
• Lodge a complaint with your local supervisory authority at any time.

6. Data Retention

Account data is retained for the lifetime of your account plus 90 days post-closure, unless a longer retention period is required by law.

API access logs are retained for 12 months for security and audit purposes.

7. Security

We protect data in transit with TLS 1.2+ and at rest with AES-256 encryption. API keys displayed in dashboard-airwallex are shown only once and stored as irreversible hashes.

We conduct regular penetration tests and maintain an internal security incident response plan. In the event of a breach affecting your data, we will notify you within 72 hours as required by GDPR.

8. Children's Privacy

dashboard-airwallex is a business tool intended for users aged 18 and older. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please contact us immediately for deletion.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be notified via email or an in-app banner at least 14 days before taking effect.

Continued use of dashboard-airwallex after the effective date constitutes acceptance of the revised policy.

10. Contact & Data Controller

For privacy enquiries, to exercise your rights, or to reach our Data Protection Officer, contact us at: [email protected] or write to dashboard-airwallex Ltd., 20 Martin Place, Sydney NSW 2000, Australia.

We will respond to all verified requests within 30 days.