Peepz Data Protection Policy

Effective Date: May 14th 2025.

1. Introduction

At Peepz Technologies Services (No.B3251/2024), we are committed to safeguarding the privacy and security of our users’ personal data. This Data Protection Policy outlines how we collect, process, store, and protect user data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the Data Protection Act of Antigua and Barbuda, and the Eastern Caribbean Central Bank (ECCB) Code of Best Practice.

2. Scope

This policy applies to all users of Peepz, including individuals, businesses, and partners who access or use our platform, as well as employees and third-party service providers handling user data.

3. Data We Collect

We collect the following types of data from our users:

Personal Information: Name, phone number, email address, and other identifiers.
Financial Data: Payment and transaction details for fintech services, including those processed through Stripe, Rapyd, Open Banking Project and Alpaca.
Investment Data: If users access financial markets through Alpaca, we collect necessary data to facilitate transactions.
Communication Data: Messages, call logs, and chat interactions (encrypted and not stored by Peepz).
Usage Data: Device information, app interactions, and analytics data.
Location Data: (Only with user consent) for location-based services.
Biometric Data: If users enable fingerprint or facial recognition for authentication.

4. How We Use Data

Peepz processes user data for the following purposes:

Providing Services: Enabling communication, financial transactions, investment opportunities (via Alpaca), and AI-powered features.
Security & Fraud Prevention: Protecting user accounts and detecting fraudulent activities.
Improving User Experience: Enhancing app performance and user interface.
Customer Support: Addressing user queries and providing assistance.
Legal Compliance: Meeting regulatory requirements, including those set by the ECCB.

5. Data Protection Measures

We implement robust security measures to protect user data, including:

End-to-End Encryption (E2EE): Messages and calls are encrypted and cannot be accessed by Peepz.
Secure Storage: Sensitive data is stored using strong encryption methods.
Access Controls: Only authorized personnel have access to necessary data.
Anonymization & Pseudonymization: Where possible, user data is de-identified.
Regular Security Audits: Ensuring compliance with best security practices and the ECCB’s Code of Best Practice.

6. User Rights

Users have the following rights regarding their data:

Right to Access: Request copies of their personal data.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request deletion of personal data.
Right to Restrict Processing: Limit how Peepz processes their data.
Right to Data Portability: Receive their data in a structured, machine-readable format.
Right to Object: Object to data processing for marketing or profiling.

Users can exercise these rights by contacting Legal@peepzchat.io.

7. Data Sharing & Third-Party Services

Peepz does not sell user data. However, we may share data with:

Payment Providers (e.g., Circle, Stellar): For transaction processing.
Investment Platforms (e.g., Alpaca): For trading and financial market access.
AI & Cloud Services: To enhance user experience (e.g., translations, analytics).
Regulatory Authorities: When legally required, including compliance with the ECCB’s regulations.

8. Data Retention

We retain user data only as long as necessary for the purposes outlined in this policy. Users may request data deletion at any time.

9. International Data Transfers

If user data is transferred outside their country, Peepz ensures compliance with applicable data protection laws by implementing appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
Data Protection Agreements (DPAs)

10. Children's Privacy

Peepz is not intended for users under 18 years (or the age required by local law). We do not knowingly collect data from minors.

11. Policy Updates

Peepz may update this policy periodically. Users will be notified of significant changes via in-app notifications or email.

12. Contact Information

For questions, concerns, or data requests, contact our Data Protection Officer (DPO) at:

Company Name: PEEPZ Technologies Services (No.B3251/2024)
Email: Legal@peepzchat.io
Address: St. Johnstons Village, St. John’s Antigua W.I. (Antigua and Barbuda)