Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through our website, applications, onboarding flows, communications, and other interactions related to the Services.

This Privacy Policy does not govern the privacy practices of third-party websites, applications, services, or providers that may be linked to or integrated with the Services. Those third parties may have their own terms and privacy notices.

2. Information We Collect

We may collect the following categories of information:

(a) Information You Provide Directly

We may collect information you provide when you create an account, complete onboarding, communicate with us, or otherwise interact with the Services, including:

• full name;
• email address;
• phone number;
• date of birth;
• residential address;
• account credentials;
• profile information;
• communications with support; and
• any other information you choose to provide.

(b) Identity Verification and Compliance Information

To support onboarding, fraud prevention, and legal or compliance requirements, we or our service providers may collect:

• government-issued identification documents;
• selfies, biometric or liveness checks where permitted;
• proof of address documents;
• tax-related or business-related information where applicable;
• screening and verification results; and
• other information reasonably required to assess eligibility, identity, or risk.

(c) Transaction and Account Information

We may collect information associated with your use of the Services, including:

• account status;
• balance-related information;
• transaction records;
• activity history;
• service usage information; and
• interactions with product features.

(d) Technical and Device Information

When you access the Services, we may automatically collect:

• IP address;
• browser type and version;
• device identifiers;
• device type and operating system;
• language preferences;
• approximate location derived from IP;
• timestamps;
• referral URLs; and
• website and application usage information.

(e) Communications and Support Information

If you contact us, we may collect:

• your name and contact details;
• the content of your messages;
• support requests;
• attachments you send us; and
• records of our communications.

(f) Information from Third Parties

We may receive information from service providers, compliance vendors, analytics providers, infrastructure providers, and other partners that help us operate the Services.

3. How We Use Information

We may use personal information for the following purposes:

• (a) to provide, operate, maintain, and improve the Services;
• (b) to create, administer, and secure user accounts;
• (c) to conduct onboarding, identity verification, fraud prevention, sanctions screening, and compliance checks;
• (d) to process requests, enable product functionality, and maintain account-related records;
• (e) to communicate with you about your account, support issues, product updates, policy changes, or operational notices;
• (f) to monitor, troubleshoot, analyze, and improve performance, reliability, and security;
• (g) to investigate suspected misuse, fraud, unlawful conduct, or policy violations;
• (h) to comply with legal, regulatory, tax, accounting, audit, and compliance obligations;
• (i) to protect the rights, safety, property, and legitimate interests of URSO, our users, and third parties; and
• (j) for any other purpose disclosed at the time of collection or otherwise permitted by law.

4. Legal Bases for Processing

Where applicable, we process personal information on one or more of the following bases:

• (a) as necessary to provide the Services and perform our contractual obligations;
• (b) as necessary to comply with legal or regulatory obligations;
• (c) as necessary for our legitimate interests, including protecting the Services, improving operations, preventing fraud, and maintaining security; and
• (d) with your consent, where consent is required by applicable law.

5. Sharing of Information

We may disclose personal information in the following circumstances:

(a) Service Providers

We may share information with trusted third-party service providers that support identity verification, compliance, hosting, infrastructure, security, analytics, customer communications, customer support, and operational or payment-related activities.

(b) Compliance, Legal, and Regulatory Disclosures

We may disclose information to regulators, courts, law enforcement, tax authorities, auditors, sanctions-screening providers, legal advisors, and other parties where required or permitted by law, or where reasonably necessary to comply with legal obligations, enforce our rights, investigate misconduct, or protect users and the public.

(c) Business Transactions

We may disclose information in connection with a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar corporate transaction.

(d) Protection of Rights and Safety

We may disclose information where we believe it is necessary to detect, prevent, or respond to fraud, abuse, security issues, technical problems, or unlawful activity, or to protect the rights, property, or safety of URSO, users, service providers, or others.

(e) With Your Direction or Consent

We may disclose information where you direct us to do so or where you otherwise consent.

6. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide and maintain the Services;
• comply with legal, regulatory, accounting, audit, and compliance obligations;
• resolve disputes;
• enforce our agreements;
• maintain business records; and
• support fraud prevention and security.

Retention periods may vary depending on the nature of the information, the Services involved, and applicable legal requirements.

7. International Transfers

Your personal information may be processed, stored, and transferred in jurisdictions outside your country or state of residence, including jurisdictions where our service providers operate.

Those jurisdictions may have data protection laws that differ from the laws of your jurisdiction. Where required, we take steps designed to ensure that personal information receives an appropriate level of protection.

8. Cookies and Similar Technologies

We may use cookies, pixels, SDKs, local storage, and similar technologies to:

• operate and secure the website and applications;
• recognize users and sessions;
• understand usage patterns;
• improve performance and user experience;
• measure engagement; and
• support analytics and troubleshooting.

You may be able to manage cookies through your browser or device settings. Blocking certain technologies may affect how the Services function.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including rights to:

• access certain personal information we hold about you;
• request correction of inaccurate information;
• request deletion of certain information;
• request restriction of certain processing;
• object to certain processing;
• request portability, where applicable; and
• withdraw consent where processing is based on consent.

These rights are subject to applicable legal limitations, exemptions, and verification requirements. We may need to retain certain information for legal, compliance, fraud prevention, or recordkeeping reasons even where a deletion request is made.

To exercise applicable rights, contact us at support@ursofinance.com.

11. Marketing Communications

We may send operational, transactional, service-related, or legal communications as part of providing the Services.

If we send optional marketing communications, you may opt out by following the instructions in the communication or by contacting us. Even if you opt out of marketing messages, we may still send important account, legal, compliance, security, or service-related notices.

12. Children's Privacy

The Services are not intended for individuals under the age of 18, or the age of legal majority in the relevant jurisdiction, whichever is higher.

We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so we can review and take appropriate action.

13. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites, products, or services. We are not responsible for the privacy, security, or data-handling practices of those third parties. You should review their applicable terms and privacy notices separately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date above.

Your continued use of the Services after changes become effective constitutes your acknowledgment of the revised Privacy Policy, to the extent permitted by law.

15. Contact Information

If you have questions, requests, or concerns regarding this Privacy Policy or our privacy practices, you may contact us at: