Pecuna — Privacy Policy
Last updated: November 12, 2026 · Effective: November 12, 2026
1. Who we are and what this policy covers
1.1. This policy explains how VIB3, Inc., a United States company ("Pecuna", "we", "us"), handles personal data in Pecuna, the ad-spend billing service available at pecuna.ai and within the VIB3 platform (the "Service").
1.2. We are the controller of the personal data described in this policy.
1.3. The Service is for businesses. The people whose data we process are mainly our clients' users, owners, directors, and authorised representatives.
1.4. If you give us personal data about other people, such as your company's owners, directors, or team members, you must make sure they are informed about this policy.
1.5. Questions: [email protected].
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, work email, role, login credentials | You |
| Verification | Identity details and documents, ownership and control information, source of funds, sanctions screening results | You, your company, public sources |
| Company | Legal name, registration and tax details, address, business information | You, public registers |
| Financial and transaction | Bank details, payments, balances, invoices, transaction records | You, our payment partner |
| Advertising | Ad account identifiers, access permissions, spend and billing data | You, Ad Platforms |
| Communications | Support requests and other messages | You |
| Technical | IP address, device and browser data, logs | Your device, our systems |
We don't intentionally collect special categories of personal data.
3. Why we use it and our legal bases
| Purpose | Legal basis (where GDPR / UK GDPR applies) |
|---|---|
| Provide and run the Service and your account | Contract; legitimate interests |
| Verify clients, screen for sanctions, prevent fraud and money laundering | Legal obligation; legitimate interests |
| Process payments and transactions | Contract |
| Invoicing, accounting, and tax | Legal obligation |
| Support and service communications | Contract; legitimate interests |
| Security, abuse prevention, and improving the Service | Legitimate interests |
| Responding to lawful requests from authorities | Legal obligation |
We don't sell personal data or use it for third-party advertising. We send marketing emails only with your consent or as the law otherwise allows, and you can unsubscribe at any time.
Client verification. Our team reviews verification information manually. We don't make decisions about you based solely on automated processing. Verification documents are accessible only to authorised staff who need them for this review.
4. Who we share it with
We share personal data only as needed to run the Service, with:
- Our payment partner, Slash, and its partner banks — to hold funds, process payments, and carry out its own verification checks;
- Ad Platforms — to provide access to and fund advertising accounts;
- Service providers — hosting, infrastructure, security, communications, and support, acting on our instructions;
- VIB3 group companies — to operate the Service;
- Professional advisers and auditors;
- Authorities and courts — where the law requires, or to protect rights and prevent fraud;
- A buyer or successor — in a merger, acquisition, or sale of assets.
Account admins within your organisation can see activity and financial data for their account.
5. International transfers
We are based in the United States and our providers may process data in other countries. When we transfer personal data from the EEA, UK, or Switzerland, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses, with the UK Addendum where relevant.
6. How long we keep it
We keep personal data only as long as we need it for the purposes in this policy. Verification and transaction records are kept for at least five years after the business relationship ends, or longer where the law requires. Accounting and tax records are kept for as long as accounting and tax laws require. After that, we delete or anonymise the data, unless we need it for a legal claim or investigation.
7. Security and cookies
7.1. Security. We use technical and organisational measures appropriate to the risk, including encryption and access controls. No system is completely secure. If a breach is likely to put you at risk, we will notify you and the authorities as the law requires.
7.2. Cookies. The Service uses cookies that are strictly necessary for login, security, and remembering your preferences. We use any non-essential cookies only with your consent where the law requires it.
8. Your rights
8.1. Depending on where you live, you may have the right to access, correct, or delete your personal data, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time.
8.2. Some rights are limited by law. For example, we must keep verification and transaction records for the legally required period.
8.3. US residents. Residents of US states with privacy laws, including California, may have additional rights to know what data we collect, use, and disclose. We don't sell or share personal data for cross-context behavioural advertising, and we won't treat you differently for using your rights.
8.4. To use your rights, email [email protected]. We may need to verify your identity, and we reply within the time the law requires.
8.5. You may also complain to your local data protection authority.
9. Children, changes and contact
9.1. The Service is not directed at anyone under 18, and we don't knowingly collect their data.
9.2. We may update this policy. For material changes, we will notify you by email or in the Service before they take effect. The date at the top shows the latest version.
9.3. Contact: VIB3, Inc. · [email protected]