PRIVACY POLICY

Last Updated: April 16, 2025

Introduction

Monirates Inc., a Delaware corporation with its principal place of business at 2055 Limestone Rd STE 200-C, Wilmington, DE 19808, USA ("Monirates," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Services").
By accessing or using our Services, you consent to the collection, use, disclosure, and storage of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

JURISDICTIONAL COVERAGE

This Privacy Policy is designed to comply with privacy laws in all jurisdictions where we operate, including but not limited to:

We recognize that different jurisdictions may have varying requirements regarding data protection, and we are committed to meeting or exceeding the legal requirements in each jurisdiction where we operate.

INFORMATION WE COLLECT

We collect several types of information from and about users of our Services:

Personal Information

Information that identifies you as an individual or relates to an identifiable person, including:

Financial Information

Information related to your financial accounts and transactions, including:

Identity Verification Information

To comply with anti-money laundering (AML) and know your customer (KYC) regulations across our operating jurisdictions, we collect information to verify your identity, such as:

Device and Usage Information

Information about your device and how you use our Services, including:

Communications Information

When you communicate with us or other users through our platform, we collect:

HOW WE COLLECT INFORMATION

We collect information in the following ways:

Directly from You

Automatically

From Third Parties

HOW WE USE YOUR INFORMATION

We use your information for various purposes, including:

Provide Our Services

Improve Our Services

Personalize Your Experience

Marketing and Communication

Security and Compliance

LEGAL BASES FOR PROCESSING (WHERE APPLICABLE)

Where required by law (such as under GDPR, UK GDPR, or similar laws), we rely on the following legal bases to process your information:

DATA SHARING AND DISCLOSURE

We may share your personal information with:

Service Providers

Financial Partners

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information when we believe in good faith that disclosure is necessary to:

With Your Consent

We may share your information with third parties when you have given us your consent to do so

SALE OR SHARING OF PERSONAL INFORMATION

Monirates does not sell personal information for monetary consideration. However, under laws like the CCPA/CPRA, certain sharing of personal information may be considered a "sale" or "sharing" even without monetary exchange.

We may share certain information (such as device identifiers, browsing activity, and transaction patterns) with advertising partners and analytics providers who may use this information for targeted advertising or analytical purposes. This may constitute "sharing" under certain privacy laws

Your Right to Opt Out

You have the right to opt out of such sharing for cross-context behavioral advertising purposes. To exercise this right:

INTERNATIONAL DATA TRANSFERS

Monirates operates in multiple countries, primarily across Africa, with connections to global financial systems. As a result, your information may be transferred to, stored, and processed in countries outside of your country of residence, including countries that may not have the same data protection laws as your jurisdiction.



When we transfer personal information from one jurisdiction to another, we implement appropriate safeguards in accordance with applicable laws, which may include:

For users in the European Economic Area (EEA), UK, and other jurisdictions with similar requirements: When we transfer your personal information outside of these regions, we ensure that appropriate safeguards are in place to provide an adequate level of data protection.

DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information, including:

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law, including:

When personal information is no longer needed, we will securely delete For All Users

YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have certain rights regarding your personal information:

For All Users

For Users in Nigeria and African Countries with Similar Rights

Under the Nigeria Data Protection Regulation and similar laws in other African countries where we operate, you may have rights to:

For Users in the United States

Depending on your state of residence, you may have rights to:

For Users in the UK and EU

You may have rights to:

How to Exercise Your Rights

To exercise your privacy rights, you can:

We will respond to your request within the timeframe required by applicable law (generally 30-45 days, depending on jurisdiction).

Verification: We may need to verify your identity before fulfilling your request by asking for additional information.

AUTOMATED DECISION-MAKING

We use automated processes for purposes such as fraud detection, identity verification, and transaction risk scoring. These automated processes may include:

Your Rights Regarding Automated Decisions

Where applicable law provides (such as under GDPR or similar laws), you have the right to:

For U.S. residents, you may have rights under state privacy laws to opt out of certain profiling activities. Please contact us to exercise these rights

SENSITIVE PERSONAL INFORMATION

We collect sensitive personal information, such as government identification numbers, financial account details, and biometric data (where permitted by law), solely for legitimate business purposes, including identity verification, fraud prevention, and compliance with financial regulations.

For U.S. residents: Under applicable state privacy laws, you may have the right to limit the use and disclosure of sensitive personal information. You can exercise this right through your account settings or by contacting us

CHILDREN'S PRIVACY

Our Services are not directed at or intended for children. We do not knowingly collect personal information from children under 13 years of age. If you are under 13, please do not provide any personal information to us.

If we learn that we have collected personal information from a child under 13 without parental consent where required by law (such as under the Children's Online Privacy Protection Act in the U.S.), we will take steps to delete that information promptly.

For users between 13 and 18 years of age, we may collect limited information as permitted by applicable law, but certain features and services may be restricted.

COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, web beacons, pixels, and similar technologies to collect information about how you use our Services.

Types of Cookies We Use

Cookie Consent and Choices

When you first visit our website, you will be presented with a cookie consent banner that allows you to:

You can also control cookies through your browser settings and other tools. However, if you block certain cookies, you may not be able to use some features of our Services.
To change your cookie preferences at any time, click on "Cookie Settings" in the footer of our website.

THIRD-PARTY LINKS AND SERVICES

Our Services may contain links to third-party websites, apps, or services that are not operated by us. If you click on these links, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

MARKETING COMMUNICATIONS

We may send you marketing communications about our products and services. You can opt out of receiving marketing communications from us by:

Even if you opt out of marketing communications, we will still send you service-related communications, such as transaction confirmations and account notices.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

The date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Privacy Policy periodically.

CONTACT US

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Privacy Team

Email: privacy@monirates.com Address: 2055 Limestone Rd STE 200-C, Wilmington, DE 19808, USA

Data Protection Officer

Email: dpo@monirates.com

For Users in Specific Regions:

REGIONAL SUPPLEMENTS

NIGERIA SUPPLEMENT

In compliance with the Nigeria Data Protection Regulation (NDPR), we provide the following additional information:

You have the right to request access to, rectification, or deletion of your personal data, and to lodge a complaint with the National Information Technology Development Agency (NITDA) if you believe your rights have been violated.

GHANA SUPPLEMENT

In compliance with Ghana's Data Protection Act, we inform you that:

UNITED STATES SUPPLEMENT

This U.S. Privacy Policy Supplement is provided pursuant to applicable U.S. state privacy laws including, but not limited to, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA).

Data Controller:Monirates Inc., a Delaware corporation with its principal place of business at 2055 Limestone Rd STE 200-C, Wilmington, DE 19808, USA

California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:

Virginia, Colorado, Connecticut, Utah, and Other State Residents

Residents of states with comprehensive consumer privacy laws may have similar rights to access, delete, correct, and opt out of the sale or processing of their personal information. Please contact us to exercise these rights.

UK AND EU SUPPLEMENT

In compliance with UK GDPR and EU GDPR (where applicable), we provide the following additional information:

To exercise your rights under GDPR or to lodge a complaint with a supervisory authority, please contact us using the information in the "Contact Us" section.