App Privacy Policy

Last Update 12 October 2024

Responsible Entity

Bankame SRL (“Bankame”), based in Santa Cruz de la Sierra, Bolivia, is responsible for processing the personal data collected through our platforms and apps.

Contact: protecciondatospersonales@panel-bankame.com

Information We Collect

Bankame may collect the following types of data:

  • Data provided directly by users: name, email, phone number, ID, employment or financial information when applying for services.
  • Data received from Meta Platforms: name, email address, profile picture, and user ID when users connect their accounts with Facebook/Instagram (only with explicit user consent).
  • Automatically collected data: IP address, device and browser information, cookies, and usage patterns for security and analytics purposes.

Purpose of Data Processing

We use personal data strictly for the following purposes:

  • To create and manage user accounts.
  • To verify identity and prevent fraud.
  • To provide and improve Bankame’s financial services.
  • To conduct credit risk assessment using alternative and psychometric data, always with user authorization.
  • To communicate with users about their accounts, transactions, payments, and service updates.
  • To enhance the user experience and provide personalized services.

We do not sell or share user data with advertisers or unrelated third parties.

Data Sharing with Service Providers

Bankame only shares user data with trusted service providers (data processors) acting on our behalf to operate our services securely. These providers include:

  • Vultr Holdings, LLC – infrastructure hosting and secure storage.
  • Zoho Corporation Pvt. Ltd. – business email services.
  • SendGrid, Inc. (Twilio) – transactional email delivery.
  • GitHub, Inc. – CI/CD build pipelines where temporary access tokens may be processed.
  • Google LLC – Firebase Authentication, Firebase Analytics, and Google Cloud Storage for user authentication, behavioral analytics, and file storage.
  • Microsoft Corporation – Microsoft Clarity for anonymized session recordings and behavioral analytics to improve user experience. No personally identifiable information is intentionally transmitted.
  • Meta Platforms, Inc. – WhatsApp Business API for OTP verification and transactional notifications sent on behalf of Bankame.
  • Hostinger International Ltd. – domain hosting and web infrastructure for Bankame's administrative panel, where access logs including IP addresses may be processed.

All providers comply with industry standards for data security and privacy.

Data Retention and Deletion

User data is retained only for as long as the account remains active. If a user closes their account, all personal data—including data obtained via Meta—is permanently deleted from our systems, unless retention is required by law.

Users may request deletion of their data at any time by emailing protecciondatospersonales@panel-bankame.com

User Rights

Users have the right to:

  • Access, correct, or update their personal data.
  • Be informed about how their data is used.
  • Withdraw consent at any time.
  • Request deletion of their personal data.

All requests will be addressed in compliance with applicable laws and our internal privacy framework.

Data Security

Bankame uses encryption, restricted access, monitoring, and other industry-standard measures to protect user data from unauthorized access, alteration, or disclosure.

Updates to this Policy

This Privacy Policy may be updated periodically to reflect changes in our practices, technologies, or legal obligations. Users will be notified of significant changes through our platforms.

Law Enforcement and Government Requests

When Bankame receives requests from public authorities or government agencies seeking access to personal data obtained from Meta Platforms, we apply the following procedures:

  • Legal review: Every request is reviewed by our legal team to verify its legality and jurisdiction before any data is disclosed.
  • Right to challenge: We reserve the right to challenge or refuse requests that we determine to be unlawful, overbroad, or inconsistent with applicable legal standards.
  • Data minimization: In the event that a lawful request must be complied with, we disclose only the minimum amount of personal data strictly necessary to fulfill the legal obligation.
  • Documentation: All requests from public authorities, including the nature of the request, the legal basis, the parties involved, and our response, are internally documented and retained for accountability purposes.

Bankame has not disclosed personal data obtained from Meta Platforms to any public authority in response to national security requests in the past 12 months.

Contact

Correo electrónico: protecciondatospersonales@panel-bankame.com

Teléfono: +591 77964178

Dirección: Av. Pirai entre 5to y 6to anillo, calle 20, Santa Cruz de la Sierra Bolivia

For users located in Bolivia, please also refer to our full Privacy and Data Processing Policy available here:

Política de privacidad y datos.