Privacy Policy

1. Introduction

This Privacy Policy applies to the website newmoneycompany.com (hereinafter the “website”) published by the company The New Money Company of San Francisco, Inc. (hereinafter “NMC” or “we”) and its other services and products for which personal data is being communicated to NMC.

Please read this Privacy Policy carefully as it explains how NMC uses your personal data and how to exercise your rights. This Privacy Policy supplements the Terms & Conditions or any documents or notices that may refer to this Privacy Policy.

Should you have any questions, you may directly contact NMC by sending an email to premier@newmoneycompany.com.


2. Definitions

DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

USAGE DATA is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit).

COOKIES are small files stored on your device (computer or mobile device).

DATA CONTROLLER means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your data.

DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

DATA SUBJECT is any living individual who is the subject of Personal Data.‍

THE USER is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.


3. Legal context

We abide by the recommendations of the relevant authorities and have put in place an organization to ensure our compliance with the regulatory framework established by the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and any other laws or regulations relating to personal information that apply to us.


4. What is our role?

Under the GDPR, we are considered as a data controller. It means that we set the whys and hows we process your personal information. For example, when you are visiting our website, we are in charge of determining the purposes and the means that are necessary to administer, operate and manage our users’ personal information that we collect from it.

Depending on the activity we perform on your data, we may also be considered as a data processor. This means that you are our customer’s end user and that we are processing your data under the instructions of our customer considered as a data controller. In this case, the data controller sets the purposes and means of the processing activity, and we abide and deliver our service in regards to these.


5. What kind of personal information do we process?

We only collect and process personal information that is relevant and adequate. We give special attention to its accuracy and updates when needed. Personal information includes in particular:

Type of data

Examples of data

Economic and financial data

e.g. income, financial situation, tax situation, banking details, etc.

Identification data

e.g. first name, last name, picture, birth date, etc.

Contact data

e.g. email address, phone number, postal address, ect.

Professional data

e.g. company name, skills, job title, diplomas, etc.

Connection data

e.g. IP address, logs, terminal and connection identifiers, timestamp, etc.

Location data

e.g. movements, GPS data, GSM, etc.

Internet data

e.g. cookies, tracers, navigation data, audience metrics, etc.

Personal data

e.g. lifestyle, family situation, etc.

Images & video data

e.g. video footage or photography

Sensible data

e.g. racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, sex life or sexual orientation, criminal convictions and offenses.

National identification number

e.g. social security number, personal public service number, ID number, etc.

The collection of this information may at times be mandatory in order to provide our service, other times optional to enhance your experience and left to your good will. Mandatory information will be identified as such when we collect your data. Know that if you refuse to provide it, NMC won’t be able to provide you with its utmost service and you will unfortunately experience inconveniences.


6. When do we collect your personal information?

We collect your personal information on various occasions.

Sources

Description

Billing form

Individual filled in a payment checkout

Online or paper form

Individual filled in a form

Sign up form

Individual signed up online

Website or software visit

Individual browsed our website or our solution

Partner relationships

Individual gave their data to one of our partners

Data enrichment tools

We've used tools to enrich personal data

Chat & Email conversation

Individual contacted us directly by mail

Third Party Service

We've collected data through the use of a third party solution or service

Video recording

Individual is recorded on camera

Job application

Individual sent us a job application

Social Media

We've collected users social media profiles

Opensource data

We've collected data openly accessible on the internet

Database purchase

We've purchased a database containing personal data

Import via API

Import of personal data via API


7. How do we use your personal information?

Your personal information will never be processed for incompatible purposes regarding why it was first collected. We only collect and process personal information for specified, explicit and legitimate purposes, like:

Processing Activities

Purposes

Legal basis

Payment & billing management

To process money transactions

Contractual duties

Cloud Hosting

This infrastructure is crucial for the smooth operation and continuous availability of our website. Additionally, they handle the direct hosting of website content, ensuring that web pages, images, and multimedia elements are delivered efficiently and responsively to end-users. The primary purpose of this processing activity is to leverage advanced hosting capabilities, ensuring optimal website performance, scalability, and reliability. Operational data such as server logs and network performance metrics are processed to maintain and enhance the hosting services. By combining robust infrastructure management with efficient content delivery, these subprocessors ensure a high-quality, reliable, and secure online presence for our services, aligning with our commitment to operational excellence and data privacy standards

Contractual duties

Website audience measurement

To gather analytics on the website traffic

Consent

Customer Lead management

To interact with individuals and companies about the service whether by email or by phone and follow lead management

Consent

Internal communications & collaboration

To collaborate internally on the company's projects

Legitimate interest

Employee expenses management

To administer service fees and business travels

Legitimate interest

Administrative employee management

To provide employees' with company benefits and manage payroll and leaves

Contractual duties, Legal and regulatory obligations, Legitimate interest

Service improvement

To maintain and optimize the performance of the service and understand how individuals use it

Legitimate interest

Customer support and social communications

To provide customer care and interact with individuals on social platforms

Legitimate interest

Electronic signature management

To digitally seal contracts and legal documents

Legitimate interest

Compliance with legal and regulatory obligations

To fulfill legal obligations and disputes

Legal and regulatory obligations

Payment Services, Remittance, and Fintech services

To process your financial transactions.

Contractual duties, Consent

KYC, AML, and Compliance Services

To process and verify identity of users accessing our financial services.

undefined

In order to comply with the principle of lawfulness, the legal bases for each data processing is determined carefully and on a case-by-case basis in accordance with the list provided by Article 6 of the GDPR.

We do not process your data or use automated decision making without your knowledge, nor do we sell or rent your personal information without your explicit consent.


8. Who can access your personal information?

Recipients to whom we disclose your personal information are carefully chosen by us. They receive data for legitimate purposes, especially when it comes to pursuing our business activity and providing a qualitative service:

Subprocessor

Service provided

Framer

Website builder

Amazon AWS

Cloud Infrastructure for apps and services

GitHub

Software development platform

Mixpanel Inc

Product analytics

Zoom

Video conferencing

Notion

Note and database app

OpenAI

Machine learning and text analytics

Slack

Collaboration program

Figma

Design, prototype, and feedback tool

Rippling

HR platform

New Relic

Product analytics

Box

File storage + E-signature platform

Stable

Physical mail services

Nium

Payment services

VertoFX

Payout services

Finix

Payout services

AiPrise

ID verification

Flagright

Transaction monitoring

JP Morgan Chase

Financial, payment, and payout services

PostHog

Product analytics

Google

Email Services, file storage, collaboration

Intercom

Customer support platform

Loops

Email platform

Google Analytics

Product analytics

Superhuman

Email

1password

Secure data sharing

Certain data recipients are considered our data processors in accordance with Article 28 of the GDPR, which means we review how they handle personal information and make sure they put in place appropriate guarantees to protect it.

Other recipients are considered authorized third parties in accordance with Article 4 of the GDPR, which means we have to communicate your personal information to them to comply with applicable legal obligations, lawful requests and processes (subpoenas, requests from government or tax authorities, etc.).


9. Where do we transfer your personal information?

As far as possible, your personal information is processed within the European Union. However, some of our service providers may be located in another country of which you are a resident or pursuing their activity outside of the European Union.

When we transfer your personal information to a recipient outside the European Union, we take care of putting in place sufficient guarantees in accordance with the list provided by Articles 44 to 50 of the GDPR, whether it is having it stored in a country with an adequate privacy protection or contracting Data Protection Agreements to ensure your personal information is protected.

Subprocessor

Location

Adopted safeguard

GitHub

USA

Data Processing Agreement

Framer

USA

DPA

LinkedIn

USA

Data Processing Agreement

Cal.com

USA

Privacy policy

Linear

USA

Data Processing Agreement

Tella HQ Inc.

USA

Data Processing Agreement

Notion

USA

Data Processing Agreement

OpenAI

USA

Data processing


10. How long do we store your personal information?

As a general rule when we are considered a data controller by the GDPR, retention periods of your personal information are determined according to the purposes for which we collected it and our legal obligations.

Regarding our activities as a data processor, we retain our customers’ end users personal information as long as required by our terms and conditions and the pursuing of the service our customers’ subscribed to.

When these purposes are fulfilled or when you ask us, your personal information is archived, erased or anonymized.


11. How do we protect your personal information?

We care deeply about the safety of your personal information and that is why we put in place adequate technical and organizational security measures to preserve its confidentiality, integrity and availability.

We take into account the risks for your rights and freedoms and therefore follow with great care the recommendations of the competent authorities regarding security.


12. What are your rights and how to exercise them?

In accordance with Articles 12 to 23 of GDPR, you have rights over your personal information that we are committed to respect:

  • you can request access to your personal information and a copy of it

  • you can ask us to modify your personal information if you consider it obsolete, inaccurate or incomplete.

  • you can object to the processing of your personal information if based on our legitimate interest in certain circumstances.

  • you can request to restrict the processing during a limited period of time, in certain circumstances.

  • you can opt-out from a consent already given, without this withdrawal affecting the lawfulness of the processing operations already carried out.

  • when technically feasible, you can ask us to send you the personal information you provided us or that we communicate it to a third party.

  • you can ask us to delete your personal information if it meets legal grounds for which it is applicable.

These rights can be exercised directly and at any time by sending an email to newmoneycompany.com or on our Data Requests page. In the case you are our customer’s end user, please take into consideration that this request will be forwarded and must be answered directly by them.


13. Children's privacy

Our Services are not intended for use by children under the age of 13 (" Children").

We do not knowingly collect personally identifiable information from Children under 13. If you become aware that a Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.


14. Policy changes

This Privacy Policy may be modified in the future to keep it updated with legal jurisprudence and evolution.


15. Contact us

If you have any questions about this Privacy Policy, please contact us via email at premier@newmoneycompany.com or by filling out a data request on our support page.

The New Money Company of San Francisco, Inc. is a financial technology company, not a bank. For more information about our banking partners, please refer to our terms of service.

The New Money Company of San Francisco, Inc. is a financial technology company, not a bank. For more information about our banking partners, please refer to our terms of service.

The New Money Company of San Francisco, Inc. is a financial technology company, not a bank. For more information about our banking partners, please refer to our terms of service.