Book a Demo
Legal

Privacy Policy

Last updated: June 29, 2026

This Privacy Policy explains how TrocaPay ("TrocaPay", "we", "us", or "our") collects, uses, discloses, and safeguards information when you visit our website, contact us, or use our financial infrastructure services and APIs (collectively, the "Services"). By using the Services, you agree to the practices described in this Policy.

TrocaPay provides financial infrastructure for Latin America, including PIX connectivity, virtual accounts, sub-accounts, collections, payouts, treasury tools, reporting, and API connectivity. Certain regulated financial services are delivered through licensed local partners, who may act as independent or joint controllers of personal data.

1. Information We Collect

Information you provide

We collect information you submit directly to us, such as when you book a demo, contact sales, or open an account, including:

  • Identity and contact details (name, business email, phone number, company name);
  • Business and onboarding information used for KYB/KYC and compliance verification;
  • Communications and support requests you send to us;
  • Transaction-related data processed through our Services on behalf of you or your customers.

Information collected automatically

When you interact with our website or APIs, we may automatically collect technical data such as IP address, device and browser type, access times, pages viewed, and usage metrics, including through cookies and similar technologies.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Services;
  • Process and reconcile payments, collections, payouts, and settlements;
  • Respond to inquiries, demo requests, and support tickets;
  • Perform KYB/KYC, fraud prevention, transaction monitoring, and risk management;
  • Comply with legal, regulatory, and contractual obligations;
  • Send service, security, and transactional communications.

3. Legal Bases for Processing

Where applicable law requires a legal basis (including under Brazil's Lei Geral de Proteção de Dados — LGPD), we process personal data on the basis of contract performance, compliance with legal and regulatory obligations, our legitimate interests in operating and securing the Services, and, where required, your consent.

4. How We Share Information

We do not sell personal data. We may share information with:

  • Regulated local partners and financial institutions that deliver licensed payment and banking services;
  • Service providers (such as cloud hosting, communications, and analytics vendors) acting on our instructions;
  • Authorities and regulators where disclosure is required by law or to prevent fraud or harm;
  • Successors in connection with a merger, acquisition, or sale of assets.

5. International Data Transfers

We operate across Latin America and may process information in countries other than where you are located. Where data is transferred internationally, we apply appropriate safeguards consistent with applicable data protection laws.

6. Data Retention

We retain personal data for as long as necessary to provide the Services and to comply with our legal, regulatory, tax, accounting, and compliance obligations. Financial and transaction records may be retained for periods mandated by applicable financial regulations.

7. Security

We maintain administrative, technical, and organizational measures designed to protect information, including access controls, audit logging, transaction monitoring, and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you may have the right to access, correct, delete, or restrict the processing of your personal data, to object to certain processing, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below. Requests relating to data processed by our regulated partners may be forwarded to the relevant partner.

9. Cookies

Our website uses cookies and similar technologies to operate, secure, and analyze usage of the site. You can control cookies through your browser settings, though disabling them may affect site functionality.

10. Children's Privacy

The Services are intended for businesses and are not directed to individuals under the age of 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: