Privacy Policy

1. Who we are

EchoPay.io ("EchoPay," "we," "us," or "our") is a financial technology company. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at echopay.io (the "Site").

2. What we collect

At this stage, EchoPay.io is in a pre-launch phase. We collect the following information:

• Email address — provided voluntarily when you join our waitlist.
• Usage data — standard web server logs including IP address, browser type, pages visited, and timestamps. This data is collected automatically.

We do not collect payment information, government-issued identification, or any other sensitive personal data through this Site.

3. How we use your information

• To add you to our waitlist and send you launch updates and announcements.
• To analyze aggregate Site usage to improve performance and user experience.
• To comply with applicable laws and legal obligations.

We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes, and we never will.

4. Legal basis for processing

We process your personal data on the following legal bases:

• Consent — by submitting your email address, you consent to us contacting you with updates about EchoPay.
• Legitimate interest — we process usage data to maintain and improve our Site.

5. Data storage and security

Your email address is stored securely using industry-standard encryption. Data is processed in the United States using Amazon Web Services (AWS) infrastructure with encryption at rest (AES-256) and in transit (TLS 1.2+).

6. Data retention

We retain your email address for as long as you remain on our waitlist. You may request removal at any time (see "Your rights" below). Usage data is retained for up to 12 months for analytics purposes, after which it is deleted.

7. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request that we delete your personal data.
• Withdrawal of consent — withdraw your consent to receive communications at any time.
• Portability — request your data in a structured, machine-readable format.
• Complaint — lodge a complaint with a supervisory authority in your jurisdiction.

To exercise any of these rights, contact us at privacy@echopay.io. We will respond within 30 days.

8. Cookies

This Site does not use cookies or third-party tracking technologies. If this changes in the future, we will update this policy and provide appropriate notice.

9. Third-party services

We use the following third-party services to operate this Site:

• Amazon Web Services (AWS) — hosting, data storage, and email processing infrastructure.

These providers are contractually obligated to protect your data in accordance with applicable privacy laws.

10. International transfers

Your data may be transferred to and processed in the United States, where our infrastructure is hosted via Amazon Web Services (AWS). Where such transfers originate from the European Economic Area or the United Kingdom, they are governed by Standard Contractual Clauses (SCCs) as approved by the European Commission, which are incorporated into AWS's Data Processing Addendum. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

11. Local data protection laws

Depending on where you are located, additional local data protection laws may apply to the processing of your personal data. Where such laws grant you rights beyond those described in section 7, those rights remain available to you. This includes, without limitation, rights to restrict processing, object to processing, and lodge a complaint with your local data protection authority.

EchoPay is committed to complying with all applicable data protection obligations in every market where we operate. For any data protection queries, contact us at privacy@echopay.io.

12. Children's privacy

This Site is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Site after changes constitutes acceptance of the revised policy.

14. Contact us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

privacy@echopay.io