Privacy Policy

Last updated: 2 June 2025

1. OVERVIEW
This Privacy Policy explains what data Loula Inc. (“Loula”, “we”, “us”) collects, why we collect it, how we use it, and the choices you have. By using Loula’s websites, mobile apps, or related services (collectively, the “Service”) you agree to these practices.
We operate primarily in the United States and Latin America, but these terms apply wherever you access us.

2. KEY DEFINITIONS
• Account – The profile you create to use the Service.
• Application – Loula’s mobile application and any web interface.
• Company / we / us – Loula Inc.
• Device – Any phone, tablet, computer, or other equipment you use to access the Service.
• Personal Data – Any information that identifies, relates to, or could reasonably identify you.
• Service Provider – A third party that processes Personal Data on our behalf (e.g., cloud hosting, identity-verification vendors).
• Usage Data – Data automatically collected from your device or our infrastructure (e.g., IP address, time-on-page).

3. WHAT WE COLLECT
A. Contact & Profile Data – Name, email, phone, mailing address, date of birth.
B. KYC / Compliance Data – Government-ID images, selfie or liveness checks, tax or social-security numbers, proof-of-address, bank-account details.
C. Transaction & Financial Data – Deposit and withdrawal amounts, wallet addresses, payment-method details, balances, statements.
D. Device & Usage Data – IP address, browser type, operating system, app version, referral source, timestamps, clickstream and interaction logs.
E. Marketing & Cookies Data – Cookie identifiers, pixel/SDK IDs, preferred language, marketing preferences.
(We encrypt all KYC files at rest and in transit and restrict access to staff who need it for compliance.)

4. HOW WE USE YOUR DATA (AND OUR LEGAL BASIS)
• Provide & operate the Service – Contract.
• Identity verification & fraud prevention – Legal obligation or Legitimate interest.
• Improve and secure the Service – Legitimate interest.
• Marketing & product updates – Consent or Legitimate interest; you may opt out at any time.
• Business transfers (e.g., mergers, financing) – Legitimate interest.

5. COOKIES & SIMILAR TECHNOLOGIES
We and selected Service Providers use:
• Essential cookies (login, fraud prevention, load balancing)
• Analytics cookies (usage trends, e.g., Google Analytics or similar)
• Marketing pixels / SDKs (campaign measurement)
You can control cookies in your browser or, where available, the in-app preference center. Disabling cookies may impair certain features.

6. HOW WE SHARE DATA
We never sell Personal Data. We may share it only:
1. With Service Providers (cloud hosting, payments, identity-verification) bound by confidentiality.
2. With affiliates and business partners that help deliver joint services or promotions.
3. During corporate transactions (merger, acquisition, financing) with appropriate safeguards.
4. When you post or interact publicly (forums, social-media integrations).
5. For legal reasons – to comply with law, enforce agreements, protect rights or safety.
6. With your consent – for any other purpose you explicitly authorize.

7. INTERNATIONAL TRANSFERS
We may process and store data outside your country, including in the United States. We use industry-standard safeguards (encryption, contractual clauses, due-diligence on vendors) to protect data when it crosses borders.

8. RETENTION
• KYC & transactional records – Five (5) years after account closure (required for anti-money-laundering and tax record-keeping).
• Marketing preferences – Until you withdraw consent or the account is deleted.
• Usage logs & analytics – Up to 24 months, unless needed longer for security or legal holds.
After the retention period we delete, anonymize, or securely archive the data.

9. YOUR PRIVACY CHOICES
You can at any time:
1. Access – Request a copy of Personal Data we hold.
2. Correct – Update inaccurate or incomplete data.
3. Delete – Close your account and delete data not required by law.
4. Opt out of marketing – Use the unsubscribe link or in-app settings.
5. Restrict or object – Ask us to limit certain processing.
How to exercise: email privacy@loula.net or, where available, use the in-app privacy center. We will verify your identity and respond in a reasonable time.

10. SECURITY
We protect data with encryption in transit and at rest, network segregation, role-based access controls, and regular security testing. No system is 100 % foolproof, but we work continuously to mitigate risks.

11. CHILDREN
The Service is only for people 18 years or older. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data, contact us and we will delete it.

12. THIRD-PARTY LINKS
Our Service may link to sites we do not control. Review their privacy policies; we are not responsible for their content or practices.

13. CHANGES TO THIS POLICY
If we make material changes, we will post the revised policy here and notify active users by email or an in-app banner at least 10 days before it takes effect. Continued use of the Service after the effective date constitutes acceptance.

14. CONTACT US
Email: privacy@loula.net
Loula Inc.