Privacy Policy

Amanect (operated by Amanect Sp. z o.o., in formation), Wrocław, Poland. Contact: privacy@amanect.com.

• Account data: name, work email, company name, role, country.
• Verification data: corporate documents you upload for review (e.g. Certificate of Incorporation, tax/VAT, IEC, KYC of directors, bank ownership, certifications).
• Payment data: processed by our payment provider; we do not store card details.
• Technical data: IP address, device/browser, log data, analytics events.

We process personal data on the following bases: (a) performance of a contract (Art. 6(1)(b) GDPR) — providing verification and platform services; (b) legitimate interests (Art. 6(1)(f)) — securing the platform, fraud prevention, improving our services; (c) legal obligation (Art. 6(1)(c)) — sanctions screening and accounting; (d) consent (Art. 6(1)(a)) — marketing communications, non-essential cookies.

To perform verification and readiness assessments, to issue certificates and Trust Score reports, to communicate with users, to run and improve the platform, and to comply with EU/international sanctions and compliance obligations.

We share data with sub-processors strictly necessary to run the service (cloud hosting, email delivery, analytics, payment processing, sanctions databases). A full list is available in our GDPR / Data Processing page. We do not sell personal data.

Where data is transferred outside the EEA, we rely on European Commission adequacy decisions or Standard Contractual Clauses (SCCs) and apply additional safeguards where required.

Verification records are retained for the duration of the verification period plus statutory retention periods under Polish/EU accounting and anti-money-laundering law. Marketing data is retained until you unsubscribe.

Under GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to withdraw consent at any time. To exercise these rights, contact privacy@amanect.com. You have the right to lodge a complaint with the Polish Data Protection Authority (UODO) at uodo.gov.pl.

We apply administrative, technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and staff confidentiality obligations.