Privacy Policy

1. Who we are (Data Controller)

CEO Capital is operated by CEO Empire LLC (United States, EIN 35-2944332), which acts as the data controller.

2. Data we collect

Account and contact details; business and verification (KYC) information; transaction and payout data; communications with us; and technical and usage data such as device, log and cookie data.

3. How and why we use it

To operate the platform, process and settle payments, verify identity and prevent fraud and money laundering, comply with legal, tax and accounting obligations, and improve our services.

4. Legal bases (GDPR)

We process personal data to perform our contract with you, to comply with legal obligations, for our legitimate interests (such as security and fraud prevention), and on the basis of consent where required.

5. Sharing your data

We share data with regulated payment providers (such as Stripe) to process payments and verify identity; with infrastructure and service providers who help us run the platform, including Cloudflare (hosting) and Telegram (internal operational notifications); and with authorities where legally required. We do not sell personal data.

Referral to a payment partner, only with your consent. If we cannot serve your business ourselves, we may pass your application on to a payment partner that fits your needs better (currently PayFresco). We only do this if you agreed to it, for example with the optional checkbox in our onboarding form or by telling us directly. We then share your business name, website, contact name, email address, phone number or Telegram username, country, expected monthly volume, business category and whether you have a US SSN/ITIN (yes or no only). We never share identity documents, tax or social security numbers, or bank or card details. The partner uses this to contact you and decides itself whether to offer you its services; from then on it is responsible for how it processes your data. You can withdraw your consent at any time via [email protected]. This does not undo a referral that has already been made.

6. International transfers

As a cross-border platform, personal data may be processed in the European Union, the United States, China and elsewhere, protected by appropriate safeguards such as standard contractual clauses.

7. Data retention

We keep personal data for as long as needed to provide the service and to meet our legal, tax and compliance obligations, after which it is deleted or anonymised.

8. Your rights

Under the GDPR you may request access to, correction, deletion, restriction of, or object to the processing of your data, and request portability. Contact us to exercise these rights. You may also lodge a complaint with your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

9. Cookies

We use essential cookies to operate the site and keep you securely logged in.

10. Security and contact

We apply appropriate technical and organisational measures to protect your data. For privacy questions, contact [email protected].