Privacy notice

This notice explains how LeilFinanz (the “platform”) processes personal data when you use our services. LeilFinanz is a technology platform; regulated banking, insurance, loan, education and employment services are provided by third-party partners who may act as independent or joint controllers for the data they process. Controller and processor roles are mapped with each partner and disclosed before you share data with them.

Data we collect

• Account & contact data: name, email, phone, password (stored only as a hash).
• Application data: nationality, date of birth, residence, visa purpose, education and employment details you provide.
• Identity & compliance data: identity-document data, verification results and screening outcomes, processed with our regulated partners for KYC/AML obligations.
• Financial data: required amounts, funding references, settlement status and payout details (account balances are held and reported by the regulated banking partner).
• Technical data: device, IP address and security-event logs used to protect your account.

How we use your data

• To provide the services you request and manage your account and applications.
• To meet legal obligations, including identity verification, anti-money-laundering and record-keeping requirements.
• To keep the platform and your account secure and to prevent fraud.
• To communicate essential service messages (these cannot be switched off while you hold an active service). Marketing messages are separate and always optional.

Legal bases

We process data on the bases of contract performance, legal obligation, legitimate interests (security and fraud prevention) and, where required, your explicit consent — for example for identity verification and sharing data with a regulated partner. You can withdraw consent where processing relies on it, subject to legal retention requirements.

Sharing & international transfers

We share data with regulated partners and service providers strictly as needed to deliver the service and meet legal obligations. Where data is transferred internationally, we apply appropriate safeguards. The specific hosting region and transfer model are configured with our partners and subject to legal review.

Retention

Retention periods follow anti-money-laundering, tax, accounting, consumer-protection and partner requirements. We do not delete records we are legally required to keep; where deletion is permitted, we delete or anonymise data after its retention period.

Your rights

• Access, rectification, restriction and, where permitted, erasure of your data.
• Portability of data you provided, where applicable.
• Objection to certain processing and withdrawal of consent.
• The right to lodge a complaint with a supervisory authority.

Contact

To exercise your rights or ask a privacy question, use secure messaging in your account or the details on our contact page. Our data-protection contact details will be published here before production launch.