Privacy Policy

Applicable Laws & Regulations

This policy reflects the data protection laws and requirements that apply to our services, including:

• Ghana Data Protection Act, 2012 (Act 843) and DPC Privacy Seal requirements
• Nigeria Data Protection Act, 2023 (NDPA) and NDPC Guidelines
• Kenya Data Protection Act, 2019
• South Africa Protection of Personal Information Act, 2013 (POPIA)
• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
• European Union General Data Protection Regulation (GDPR) and United Kingdom GDPR
• FATF recommendations on data handling in AML/KYC contexts
• Applicable US federal and state privacy laws, including CCPA/CPRA and GLBA

1. Who We Are

Syka is a financial technology platform operated by Xenon Technologies Inc. (Delaware, USA), Xenon Technology Solutions (Canada) Inc., and Xenon Ltd. (Ghana). Together, these entities operate the Syka platform, which provides cross-border payment processing, stablecoin-based settlement, and related financial technology services.

• Xenon Technologies Inc. — incorporated under the laws of the State of Delaware, USA
• Xenon Technology Solutions (Canada) Inc. — incorporated federally under the Canada Business Corporations Act
• Xenon Ltd. — incorporated under the laws of Ghana

Data controllers: Xenon Technologies Inc., Xenon Technology Solutions (Canada) Inc., and Xenon Ltd. (joint data controllers). Data Protection Officer / MLRO: Edem Quintin Dzorkpata. Contact: legal@xenonlimited.co · sykabank.com

2. Information We Collect

We collect personal information directly from you, automatically when you use our services, and from third parties that support our services.

• Identity, contact, and account registration information
• Government identification, verification photographs, and KYC information
• Payment, transaction, account, and beneficiary information
• Device identifiers, IP address, log data, and information about how you use the platform
• Session, preference, analytics, and security cookie data
• Identity verification and screening results from providers such as Smile Identity, Sumsub, and Dojah
• Relevant information from banking and payment partners, authorised bureaus, and fraud prevention networks

3. How We Use Your Information

We use personal information to provide and maintain your account and to meet our legal and operational responsibilities.

• Create and manage accounts and verify your identity
• Process payments, transfers, currency conversion, and transaction confirmations
• Meet KYC, AML, sanctions screening, regulatory reporting, and record keeping obligations
• Protect customers and the platform from fraud, abuse, and security threats
• Respond to support requests, resolve disputes, and communicate service updates
• Improve our products and understand how customers use our services
• Send marketing messages where permitted and where you have provided consent

4. How We Share Your Information

We share information only where needed to provide the services, protect customers, or meet legal obligations.

• Partner banks, payment providers, and financial institutions that process transactions
• Identity verification, sanctions screening, fraud prevention, and security providers
• Regulators, law enforcement, courts, and public authorities when required by law
• Service providers that support hosting, communications, analytics, and customer care
• Professional advisers and auditors under appropriate confidentiality safeguards

5. International Data Transfers

Your information may be processed in countries where we or our service providers operate. When information is transferred across borders, we use appropriate safeguards and contractual protections in accordance with applicable data protection laws.

6. Data Retention

We keep personal information for as long as needed to provide our services, meet regulatory and legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of information and the purpose for which it was collected.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, and to object to certain processing or withdraw consent.

• Request a copy of the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Request deletion or restriction where applicable law allows
• Object to processing based on legitimate interests
• Withdraw consent for marketing or other consent-based processing
• Complain to your local data protection authority

8. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal information from children who are not legally able to use our services.

9. Third-Party Links and Services

Our website may link to services operated by third parties. Those services have their own privacy policies, and we are not responsible for their privacy practices.

10. Automated Decision-Making and Profiling

We may use automated tools to help detect fraud, assess risk, verify identity, and protect our services. Where a decision has a significant effect on you, you may contact us to request further information or review, subject to applicable law.

11. Marketing Communications

You can opt out of promotional messages at any time by using the unsubscribe link in the message or contacting us. We may still send essential service, security, and transactional communications.

12. Changes to This Privacy Policy

We may update this policy when our services or legal requirements change. We will publish the updated version on this page and revise the date above.

13. Regulatory Organisations and Certifications

Syka works with licensed banking and payment partners in the jurisdictions where our services are available. Our partners and service providers are subject to applicable regulatory and security requirements.