Privacy Policy

Last updated: October 2026

Coreledgerpay ("we", "us") provides mobile and web banking services, and this policy explains what information we collect, why, and how you can control it.

0. About this instance

Coreledgerpay is a banking-technology platform that we license to banks, credit unions, and fintechs, who each run their own dedicated instance for their own customers. This particular instance is our flagship demonstration and evaluation environment, used by internal testers and by prospective bank/credit union clients evaluating the platform. It is not a bank, is not FDIC insured, and does not hold or move real funds - every balance, transfer, and card number here is a real database record with real business logic, but none of it is connected to a real bank charter, card network, or ACH rail. A bank or credit union that licenses this platform for its own customers operates its own real, regulated instance, separately from this one.

1. Information we collect

• Account information: your email address and a securely hashed password (we never store your password in plain text).
• Identity verification (KYC): when you verify your identity, we collect the documents and details you submit for that purpose, as required by law to open a financial account.
• Financial data: account balances, transactions, cards you issue, standing orders, savings pots, and budgets you create.
• AI assistant conversations: if you use "Ask Coreledgerpay", we process what you type in order to answer your question or carry out an action you explicitly confirm - the assistant only ever acts through the same checks as the rest of the app, and never moves money without your confirmation.
• Camera and photos: only if you choose to photograph an ID document or take a selfie during identity verification. We don't use your camera or photo library for anything else.
• Usage information: basic technical data (device type, app version, crash reports) to help us keep the app working correctly. We don't use advertising or analytics trackers.

2. How we use your information

We use your information to provide and secure the service: operating your account, processing transactions you authorize, verifying your identity, preventing fraud, sending you transactional email (like a welcome message or a password reset), and improving the app. We do not sell your personal information.

3. Who we share information with

We share information only where necessary to run the service:

• Microsoft Azure, which hosts our servers and stores your data, and Azure Communication Services, which delivers transactional email (welcome and password-reset messages).
• Our identity-verification provider (currently Persona), when verification is handled by the provider: it processes the details and images you submit during verification on our behalf.
• Cal.com, if you book a walkthrough with us through our scheduling page: it receives your name, email address, the time you choose and the answers you give on the booking form.
• Sentry, which receives crash reports (technical details about an error, such as the app version and device type) so we can fix problems.
• An AI language model provider, only for messages you send to the AI assistant, and only when that feature is enabled.
• Regulators or law enforcement, if we're legally required to.

We do not share your information with advertisers, and we do not sell it to data brokers.

4. Data retention

Financial institutions are legally required to retain transaction records for a number of years, even after an account is closed. If you delete your account, your login is disabled and your personal profile is marked closed, but transaction history tied to your accounts is retained for as long as the law requires.

5. Your rights

You can review your account and transaction history at any time in the app. You can delete your own account from Security settings, provided every account and savings pot has a zero balance (see our Terms of Service for why). You can download a copy of your accounts and transactions from Security settings ("Download my data"), or contact us to request anything it doesn't cover or to ask a question about this policy.

6. Security

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, and role-based access controls for our own staff. No method of transmission or storage is 100% secure, but we work to protect your information to the best of our ability.

7. Changes to this policy

If we make a material change to this policy, we'll update the "Last updated" date above and, where appropriate, notify you in the app.

8. Contact us

Questions about this policy, or requests about your personal data, can be sent to privacy@coreledgerpay.com.