Privacy Policy

Effective date: April 29, 2026

This Privacy Policy describes how SOYOLE (“we”, “us”, or “our”) handles information when you use the SOYOLE agent mobile application (the “App”) and when those services connect to our backend systems (the “Services”). The App is intended for authorized agents and staff operating on behalf of participating agencies or partners.

1. Who this applies to

You must be authorized to use the App (for example by your employer or the network you represent). If you do not agree with this policy, do not use the App. Your organization may have additional terms; where they conflict on employment or agency matters, those agreements may take precedence.

2. Information we process

Depending on how your organization configures the platform and how you use the App, we may process:

• Account and profile data — such as identifiers, name, contact details, and role information supplied at registration or by your administrator.
• Authentication data — credentials and security tokens used to sign you in and protect your session (including data stored securely on your device).
• Operational and transaction data — information you enter or generate when performing permitted agency workflows (for example till operations, deposits, withdrawals, partner top-ups, history, and related records).
• Device and technical data — such as device type, operating system, app version, and diagnostic information needed to run and secure the Services.
• Update and compatibility checks — app version and platform may be sent to our servers (or configured infrastructure) to determine whether an update is recommended or required.
• Communications — messages you send to us through support channels, if available.

3. How we use information

We use the information above to:

• Provide, operate, and maintain the App and backend Services;
• Authenticate users and enforce access controls;
• Process and record transactions and operations you are authorized to perform;
• Detect, prevent, and address fraud, abuse, and security issues;
• Improve reliability and performance, including version management;
• Comply with legal obligations and respond to lawful requests.

4. Legal bases (where applicable)

If laws such as the GDPR apply, we rely on appropriate bases including: performance of a contract (providing the Services to your organization), legitimate interests (security, integrity, and improvement of the Services, balanced against your rights), compliance with legal obligations, and, where required, consent.

5. Sharing of information

We may share information with:

• Your organization — administrators and systems that manage accounts and oversight;
• Service providers — hosting, cloud infrastructure, and vendors that process data on our instructions under contractual safeguards;
• Authorities — when required by law or to protect rights, safety, and security.

We do not sell your personal information.

6. International transfers

Data may be processed in countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers from the EEA, UK, or Switzerland.

7. Retention

We retain information for as long as needed to provide the Services, for legitimate business purposes (including audit and dispute resolution), and as required by law. Retention periods may depend on your organization’s policies and regulatory requirements for financial records.

8. Security

We implement technical and organizational measures designed to protect information, including encryption in transit where applicable, access controls, and secure handling on servers. No method of transmission or storage is completely secure; please protect your device and credentials.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the details below. We may need to verify your identity and coordinate with your organization where accounts are managed centrally.

10. Children

The Services are not directed at children. We do not knowingly collect personal information from children below the age digital services require parental consent in your region.

11. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Effective date” above. Continued use of the App after changes may constitute acceptance where permitted by law.

12. Contact

For privacy questions or requests regarding SOYOLE, contact the support channel provided by your organization, or email privacy@soyole.app.

This policy describes typical processing for the SOYOLE agent mobile product. Exact data categories and retention depend on your deployment, integrations, and applicable law. Nothing here limits disclosures your organization must make to you under employment or local regulations.