Privacy Policy

Last Updated: October 26, 2023

Baalvion Industries Pvt. Ltd. ("Baalvion", "we", "us", "our") is committed to protecting the privacy and security of the data on our platform. This Privacy Policy explains how we collect, use, process, and disclose information in relation to our institutional-grade operating system for global trade (the "Platform"). This policy applies to Verified Institutions and their authorized users.

1. Information We Collect

Our data collection is strictly limited to what is necessary for the operation, security, and compliance of the Platform.

Institutional Data: Data that your institution and its authorized users submit to the Platform, such as trade documents, transaction details, and communications. Your institution owns and controls this data. We process it solely on your behalf as a data processor.
User Account Information: To create and manage user accounts, we collect information such as name, official institutional email address, role, and permissions. This information is used for authentication, authorization, and communication.
System and Usage Data: We automatically collect technical data about interactions with the Platform. This includes IP addresses, device types, browser information, API call logs, and feature usage patterns. This data is used for security monitoring, performance optimization, and audit purposes. It is never used to profile individuals.

2. How We Use Information

We use the information we collect for the sole purpose of providing and maintaining the Platform. This includes:

Operating and maintaining the Platform's core functionalities, including trade execution, settlement orchestration, and compliance checks.
Authenticating users and enforcing role-based access controls.
Monitoring the Platform for security threats, fraud, and malicious activity.
Providing support, responding to inquiries, and communicating system updates.
Complying with our legal, regulatory, and audit obligations.
Generating anonymized and aggregated statistical data for system performance and trend analysis. We never use institutional data for this purpose without explicit, jurisdiction-aware consent.

3. Information Sharing and Disclosure

Baalvion is not a data broker. We do not sell or rent institutional or personal data. Information sharing is strictly limited to the following circumstances:

Within Your Institution: Your Institutional Data is accessible to authorized users within your institution based on the roles and permissions you define.
With Trade Counterparties: Information is shared with other institutions on the Platform only as necessary to execute a trade transaction in which you are a party. This is governed by the rules of the platform and the agreements between institutions.
Service Providers: We may use third-party service providers (e.g., cloud hosting, security services) to help us operate the Platform. These providers are contractually bound to protect data and are not permitted to use it for any other purpose.
Legal Compliance and Law Enforcement: We may disclose information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Security

We implement and maintain institutional-grade technical, physical, and administrative security measures designed to protect data from loss, misuse, and unauthorized access. These measures include end-to-end encryption, network segmentation, strict access controls, and regular security audits.

5. Data Retention

We retain data only for as long as necessary to fulfill the purposes outlined in this policy, to comply with our contractual obligations to your institution, and as required by applicable law and regulatory record-keeping requirements.

6. Your Rights and Choices

As we are a data processor for your Institutional Data, your institution's administrator is responsible for managing user accounts and data. Authorized users should contact their institutional administrator to exercise any data rights (e.g., access, correction, deletion).

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will provide notice of material changes through the Platform's institutional communication channels.

8. Contact Information

For any questions or concerns about our privacy practices, please contact our Platform Governance team at governance@baalvion.com.

1. Information We Collect

Our data collection is strictly limited to what is necessary for the operation, security, and compliance of the Platform.

Institutional Data: Data that your institution and its authorized users submit to the Platform, such as trade documents, transaction details, and communications. Your institution owns and controls this data. We process it solely on your behalf as a data processor.

User Account Information: To create and manage user accounts, we collect information such as name, official institutional email address, role, and permissions. This information is used for authentication, authorization, and communication.

System and Usage Data: We automatically collect technical data about interactions with the Platform. This includes IP addresses, device types, browser information, API call logs, and feature usage patterns. This data is used for security monitoring, performance optimization, and audit purposes. It is never used to profile individuals.

2. How We Use Information

We use the information we collect for the sole purpose of providing and maintaining the Platform. This includes:

Operating and maintaining the Platform's core functionalities, including trade execution, settlement orchestration, and compliance checks.

Authenticating users and enforcing role-based access controls.

Monitoring the Platform for security threats, fraud, and malicious activity.

Providing support, responding to inquiries, and communicating system updates.

Complying with our legal, regulatory, and audit obligations.

Generating anonymized and aggregated statistical data for system performance and trend analysis. We never use institutional data for this purpose without explicit, jurisdiction-aware consent.

3. Information Sharing and Disclosure

Baalvion is not a data broker. We do not sell or rent institutional or personal data. Information sharing is strictly limited to the following circumstances:

Within Your Institution: Your Institutional Data is accessible to authorized users within your institution based on the roles and permissions you define.

With Trade Counterparties: Information is shared with other institutions on the Platform only as necessary to execute a trade transaction in which you are a party. This is governed by the rules of the platform and the agreements between institutions.

Service Providers: We may use third-party service providers (e.g., cloud hosting, security services) to help us operate the Platform. These providers are contractually bound to protect data and are not permitted to use it for any other purpose.

Legal Compliance and Law Enforcement: We may disclose information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect our rights, your safety, or the safety of others.