Scope and roles
This policy applies to the Valtoria website, authenticated account area, support channels, and operational services that link to it. “Valtoria,” “we,” and “us” refer to the operator identified in your account agreement or product disclosure. A partner’s own policy applies to processing within its separate service.
Depending on the service and applicable law, we may decide why and how information is processed or process it on behalf of an identified partner.
Information we collect
Information you provide
- Identity, contact, profile, and verification information.
- Operation requests, beneficiaries, credit applications, supporting documents, messages, complaints, and consents.
- Permitted card metadata such as network, cardholder label, expiry information, and last four digits.
Information generated through use
- Account references, balances, ledger entries, request status, review decisions, timestamps, audit records, and support history.
- Device, browser, IP address, session, security-event, and diagnostic information.
How we use information
We use information to administer accounts; authenticate users; receive, review, approve, reject, process, complete, or fail requested operations; maintain financial and audit records; communicate status; prevent fraud; provide support; investigate incidents; and comply with applicable obligations.
Where required, processing may rely on a contract, legitimate security or operational interests, legal obligations, vital interests, or consent. The basis depends on your location and the activity.
Manual review and decisions
Funding, transfer, credit, and other requests may be handled manually by authorized personnel. A submission is only a request—not proof of authorization or completion. We may validate identity, eligibility, balance, supporting records, and risk indicators before marking it processing, completed, or failed.
Where applicable law provides rights concerning decisions with significant effects, you may request information or human review.
Retention and deletion
We retain information only as reasonably needed for account administration, transaction records, disputes, fraud prevention, security, tax, accounting, and legal obligations. When retention is no longer justified, information is deleted, anonymized, or isolated from routine use.
A deletion request may not override mandatory recordkeeping, anti-fraud, dispute, or legal-hold requirements.
Your privacy choices and rights
Depending on your location, you may request access, correction, deletion, restriction, portability, objection, withdrawal of consent, or review of certain decisions. We may verify identity and lawful exceptions may apply. You may also have a right to complain to the competent privacy authority.
International processing
Valtoria, personnel, or providers may process information outside your country. Where law requires safeguards for an international transfer, we will use an approved transfer mechanism or another lawful basis.
Security and incidents
We use safeguards proportionate to the information and service, but no online system is risk-free. Protect your credentials, review activity, and promptly report suspected compromise. See the Security Policy.
We investigate qualifying incidents and notify affected people or authorities when applicable law requires it.
Children, changes, and contact
The service is not directed to children or anyone below the minimum age in the applicable account terms. We may update this policy as services, operations, or laws change and will provide notice of material changes where required.
Contact the right team
For account-specific matters, sign in and use secure support. Do not send passwords, one-time codes, full card numbers, or security codes through general contact forms or email.