Privacy Policy

Kinetic Fintech (“Kinetic,” “we,” “us,” or “our”) provides enterprise core banking (Core) and payment (Flow) API infrastructure to banks, fintechs, and software platforms (our “customers”). This Privacy Policy explains what information we collect through our website and services, how we use it, and when we share it.

Kinetic’s customers are themselves responsible for providing their own end users with a privacy notice covering how account holders’ and payees’ data is handled within the customer’s own product. This policy covers information Kinetic collects directly, including information our customers submit to us in order to use Core and Flow.

• Account and contact information — name, company, business email, and phone number, collected when you request a demo, create a sandbox account, or contact sales or support.
• Onboarding and compliance information— business registration details, beneficial ownership information, and identity documentation submitted during Core or Flow onboarding, which we need in order to meet our own and our banking partners’ KYC/AML obligations.
• Transaction and account metadata — processed through Core and Flow on behalf of our customers, such as account identifiers, payment amounts, and rail routing data (ACH, FedNow, RTP, SWIFT, card networks).
• Technical and usage data — API logs, IP addresses, device and browser information, and cookies collected through our website and developer documentation for security, analytics, and debugging.

We use the information above to operate and secure the Core and Flow platforms, process and route payments, verify customer and account-holder identity, detect and prevent fraud, meet our regulatory and audit obligations (including SOC 2, PCI-DSS, and AML/BSA requirements), provide support, and communicate with prospects and customers about our services.

Kinetic does not sell customer information, and we do not share customer information with third parties except where that sharing is required to deliver our services or required by law.

In practice, this means information is shared only with:

• Partner banks and payment rails — sponsor banks, card networks, and payment rails (ACH, FedNow, RTP, SWIFT) that must receive transaction and account data to settle and move funds.
• Identity verification and compliance providers — KYC, KYB, and sanctions screening vendors we use to verify identity and meet AML/BSA obligations before an account or payment can be approved.
• Infrastructure and sub-processors — cloud hosting, logging, and security vendors who process data strictly on our behalf, under contractual confidentiality and data protection terms, and only to the extent needed to operate Core and Flow.
• Regulators and legal process — government authorities, auditors, or examiners where disclosure is required by law, regulation, or a valid legal request.
• Corporate transactions — a successor entity in connection with a merger, acquisition, or sale of assets, subject to the same privacy commitments described here.

We do not share customer or transaction information with advertisers, data brokers, or any other third party for marketing purposes.

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of financial data, including encryption in transit and at rest, access controls, and continuous monitoring, consistent with our SOC 2 Type II and PCI-DSS obligations.

We retain information for as long as needed to provide our services and as required by applicable banking, payments, and recordkeeping regulations, after which it is securely deleted or anonymized.

If you are an end user of a bank or fintech that uses Kinetic’s infrastructure, please contact that company directly regarding your data, as Kinetic acts as their infrastructure provider rather than your direct service provider. Customers and website visitors may contact us using the details below to ask about the information we hold.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date below.

Questions about this Privacy Policy can be directed to our team through the contact page.