Privacy Policy

Effective Date: 16th February 2026

1. Introduction

1.1 PIL by Cardtonic (“PIL”, “we”, “us”, or “our”) is a virtual dollar card and expense management platform designed for individuals, teams, and businesses conducting high-value online transactions.

1.2 This Privacy Policy explains how we collect, use, store, and protect your personal and business information when you register, access, or use PIL. By using the Platform, you consent to the practices described in this Policy.

2. Information We Collect

2.1 We collect information to provide services, ensure compliance, and improve your experience. This includes:

1.1 Personal Information

Full name, date of birth, and contact details (email, phone number)
Government-issued identification (for KYC/verification)
Profile information for teams or individual accounts

1.2 Business Information

Company name, registration number, and business address
Authorized representatives’ details
Financial account information used to fund cards

1.3 Transaction & Usage Data

Payment and card transaction history
Wallet funding history
Failed or declined transaction logs
IP address, device information, and login activity
Platform interactions (e.g., dashboard usage, reports generated)
Transactions funded via stablecoins (USDC, USDT) are executed on public blockchain networks. While we protect your PIL account information and personal data, transaction hashes and wallet addresses are publicly visible on-chain. You acknowledge and accept that these blockchain transactions cannot be fully private.

1.4 Cookies & Tracking

Cookies or similar technologies to improve UX, analytics, and fraud detection

3. How We Use Your Information

3.1 We use your information for:

Providing, maintaining, and improving PIL services.
Transaction processing and settlement
Compliance with legal, regulatory, and KYC/AML requirements.
Risk management, fraud detection, and security monitoring.
Customer support and account management.
Communicating updates, features, or relevant product information.
Integration with accounting software, APIs, or third-party services (where authorized).

4. Sharing Your Information

We do not sell your data. We may share information:

With service providers: Payment processors, blockchain networks, cloud service providers, or analytics partners
For compliance or legal reasons: Regulatory authorities, law enforcement, or in response to legal requests.

5. Security

5.1 We implement industry-standard technical, administrative, and physical safeguards, including:

End-to-end encryption for sensitive data
Multi-factor authentication for accounts
Secure storage of KYC and financial information
Regular internal audits and monitoring

5.2 However, we are not liable for unauthorized access beyond our reasonable control.

6. Data Retention

6.1 We retain your personal and business information:

For as long as your account is active
For regulatory, compliance, or legal obligations (e.g., KYC/AML records)
Until it is no longer required for legitimate business purposes

6.2 Upon account closure, we may anonymize or securely delete your information.

7. Your Rights

Depending on your jurisdiction, users rights are not limited to:

Access their personal information
Correct or update inaccuracies
Request deletion of personal data
Restrict or object to certain processing
Withdraw consent where applicable

by contacting accounts@pil.com

8. International Transfers

PIL may store or process your data in countries outside your residence. We ensure that cross-border transfers comply with applicable laws and maintain adequate protection for your information.

9. Third-Party Links

9.1 PIL may contain links to third-party services. This Privacy Policy does not cover their practices. We encourage users to review the privacy policies of any third-party services.

9.2 When users authorize integrations with third-party accounting software (e.g., Xero, QuickBooks), the processing of that data becomes subject to the terms and privacy policies of those respective providers. Pil By Cardtonic is not responsible for how those platforms handle your exported data.

10. Updates to This Policy

We may update this Privacy Policy to reflect changes in our services, regulations, or operational practices.

Upon any update, each update will have a new version number and effective date and users will be notified via email or in-app notifications for significant changes.