Legal

Privacy Policy

Last updated: 30 June 2025

Your privacy matters to us. This policy describes what data we collect, why we collect it, and how we handle it — written in plain language so you can understand exactly how 1Layer treats your information.

1. Who We Are

1Layer operates a payments intelligence platform that helps financial institutions, fintechs, and payment operators manage settlements, reconciliation, and compliance. This Privacy Policy explains how we collect, use, and protect information in connection with that platform and this website. If you have any questions, contact us at hello@1layer.app.

2. Information We Collect

Information you provide

When you contact us, register for access, or use the Service, we may collect your name, email address, company name, and any other information you choose to share. We also receive files, settlement data, and payment records that you upload or transmit to the platform.

Information collected automatically

When you visit our website, we collect standard server log data including IP address, browser type, referring URL, and pages visited. We use essential cookies to maintain session state. We do not use advertising or behavioural tracking cookies.

Payment and financial data

The core function of the Service involves processing settlement files, bank statements, and fee data on your behalf. This data is treated as strictly confidential and is processed solely to deliver the Service to you.

3. How We Use Your Information

To provide, operate, and improve the Service
To communicate with you about your account, support requests, or changes to the Service
To detect and investigate security incidents or misuse of the platform
To comply with legal obligations
To send product updates or relevant communications (you can opt out at any time)

We do not sell, rent, or share your personal data or client data with third parties for marketing or commercial purposes. We do not use client-uploaded data for model training or product analytics beyond what is strictly necessary to operate the Service.

4. Legal Basis for Processing

We process your personal data under the following legal bases: performance of a contract (where processing is necessary to provide the Service you have agreed to); legitimate interests (such as maintaining security and improving our platform); compliance with legal obligations; and, where applicable, your explicit consent. You may withdraw consent at any time where consent is the basis for processing.

5. Data Sharing

We do not sell or rent your personal data. We may share information with trusted service providers who assist us in operating the platform (for example, cloud hosting providers), but only under strict confidentiality obligations and solely for the purpose of delivering the Service. We may disclose information where required by law, regulation, or a valid legal process. In the event of a merger or acquisition, data may be transferred as part of that transaction, and you will be notified in advance.

6. Data Retention

We retain personal data and client data for as long as necessary to provide the Service and comply with our legal obligations. Client data is deleted within 30 days of account termination unless a longer retention period is required by law or agreed in writing. Server logs are retained for up to 90 days. You may request deletion of your personal data at any time (see Your Rights below).

7. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encryption in transit and at rest, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security — but we take our obligations seriously and will notify you promptly in the event of a breach that affects your data.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data; object to or restrict certain processing; request data portability; and withdraw consent where consent is the legal basis for processing. To exercise any of these rights, contact us at hello@1layer.app. We will respond within 30 days. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

9. Cookies

We use only essential cookies — small files stored in your browser that are strictly necessary for the Service to function (for example, to keep you logged in). We do not use analytics, advertising, or third-party tracking cookies. You can control cookies through your browser settings; disabling essential cookies may affect the functionality of the Service.

10. International Data Transfers

Our servers are located within the European Economic Area. If we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place — such as standard contractual clauses approved by the European Commission — to protect your data in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated by email or via a notice on the platform. The date at the top of this page indicates when the policy was last revised. We encourage you to review it periodically.

12. Contact

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at hello@1layer.app. We take all enquiries seriously and will respond as promptly as possible.