Privacy Policy

Viacle ("we", "us") operates viacle.io and the Viacle application. For the account and business records you give us, we decide why and how that data is processed.

We are software, not a bank. Customer funds and cross-border money movement sit with regulated banking and payment partners, and those partners process some of your data under their own privacy policies.

• Account details — your name, work email, phone number, job title and the company you act for, plus the roles and permissions assigned to you inside your account.
• Business and financial records — the customers, suppliers, invoices, bills, payments, bank references, ledger entries and documents you or your team add to Viacle.
• Payment and banking information — the account details you save to pay suppliers, and the status, amounts, fees and settlement records that come back from our banking and payment partners.
• Verification information — company registration, ownership and, where a partner requires it, identification for people authorised to move money. This is a legal requirement for money movement, not a choice we make.
• Technical data — IP address, device and browser details, log entries, and how features are used inside the product.
• From other sources — information about your accountant, auditor or counterparty when you invite them in, and transaction confirmations from our partners.

• To run the service: issue invoices, approve and send payments, convert currency, reconcile and keep your books accurate.
• To verify who is behind an account and who is allowed to approve what.
• To detect and prevent fraud, money laundering and the financing of weapons.
• To keep the service secure and running, and to answer your support requests.
• To improve the product, using aggregate patterns rather than the contents of any one company's books.
• To meet our own legal and accounting obligations.

We do not sell your personal data, and we do not use your financial records to train third-party AI models.

We share the minimum each recipient needs, and only with:

• Regulated banking and payment partners — to hold funds, move money and return settlement records.
• Identity and fraud screening providers — to check companies and authorised people.
• Infrastructure and support suppliers — hosting, backups, communication and ticketing, under contract.
• Your own people — colleagues, accountants and auditors you give access to.
• Professional advisers, auditors and authorities — where we are required or permitted by law.
• An acquirer — if we are bought, your data may transfer as part of that deal.

Every one of these is limited by contract to the job we sent them to do.

Data is processed in the United States and in the countries where our partners and suppliers operate. Where a transfer needs a legal safeguard, we rely on standard contractual clauses or an equivalent recognised mechanism. The location of your money is set by the bank or payment partner that holds it, not by us.

While your account is open, we keep what the service needs to work. After an account closes, accounting records are kept for the period financial law requires — commonly seven years — and then deleted or anonymised. Backups are rotated and fall away on their own schedule.

You can ask us to access, correct, delete, restrict or export your personal data, and you can opt out of product emails at any time. Your data is exportable by design — your ledger, documents and history leave with you, in usable formats, whether or not you stay.

Write to privacy@viacle.io and we will respond within 30 days. Some records cannot be deleted while the law requires us to keep them, and we will always tell you which ones and why. If you are not satisfied, you can complain to your local data protection authority.

Data is encrypted in transit and at rest. Access inside Viacle is role-based, and staff only reach customer data when a job requires it. Every change to a financial record is logged. See our security page for the full picture — and remember no system is ever perfectly secure, which is why we also design for fast detection and clear recovery.

We use the cookies needed to keep you signed in and your session safe, plus a small amount of analytics to understand what people actually use. No advertising cookies, and no trackers that follow you around the web to sell you something.

We update this page when our practices change and date it at the top. For material changes — a new category of data, a new purpose, a new type of recipient — we also notify account admins by email before it takes effect.

Questions about this policy or about data you would like us to change: privacy@viacle.io. For anything else, see hello@viacle.io.