Unleash Your
Business Potential

Investarnia is committed to safeguarding personal and transactional data processed through our systems in compliance with the General Data Protection Regulation (GDPR) and PCI DSS Level 1 standards.

1. Information We Collect

We collect merchant applicant data (corporate registry documentation, contact credentials, director identities) and transactional metadata (hashed card tokens, IP addresses, transaction amounts, and routing data) necessary to execute processing requests.

2. Security & Tokenization

Investarnia does not store plaintext primary account numbers (PAN). All payment processing conforms to PCI DSS specifications utilizing end-to-end tokenization and cryptographic transport protocols (TLS 1.3).

3. Data Sharing & Third Parties

Information is only transferred to licensed acquiring banks, payment processors, and anti-fraud surveillance engines strictly necessary to execute settlement and adhere to compliance directives.

4. Your Data Subject Rights

EU and global counterparties may exercise rights of access, rectification, erasure, and data portability by writing directly to dpo@investarnia.com.

Investarnia maintains an unwavering zero-tolerance stance against financial crime, money laundering, sanctions evasion, and terrorist financing.

1. Know Your Customer (KYC) & Due Diligence

Prior to live account provisioning, each merchant undergoes thorough Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD), including verification of Ultimate Beneficial Owners (UBOs) holding 25% or greater equity, certificate of good standing, and processing track record.

2. Sanctions & Politically Exposed Persons (PEP)

Continuous real-time screening is conducted across global watchlists, including OFAC, European Union Common Foreign and Security Policy, and UN Sanctions lists. Individuals classified as PEPs are subjected to senior management review.

3. Ongoing Transaction Monitoring & SAR Reporting

Automated behavioral heuristics inspect processing velocities and geographic anomalous patterns. Suspicious activities trigger internal review and, where mandated, Suspicious Activity Reports (SARs) submitted to pertinent Financial Intelligence Units (FIUs).