1. Introduction
SYSTM (“we”, “our” or “us”) provides an agentic treasury operating system for businesses. This Privacy Policy explains how we collect, use, store, share and protect information when you use our website, dashboard, payment services, cards and related products (collectively, the “Services”).
By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
2. Who we are
SYSTM is operated by SYSTM Labs Ltd. For privacy-related questions, contact us at privacy@systm.xyz.
3. Information we collect
We collect information needed to provide, secure and improve the Services:
- Business and contact details — company name, registration number, address, email and phone number.
- Identity verification — director, beneficial owner and authorised user information, including government-issued IDs and proof of address, processed through our KYC/AML partners.
- Financial information — bank account details, balances, transaction history, stablecoin wallet addresses, card numbers and payment instructions.
- Usage and device data — IP address, browser type, device identifiers, pages viewed, feature usage and error logs.
- Communications — support tickets, chat transcripts, emails and feedback.
4. How we use your information
We use your information to:
- Onboard your business, verify identity and comply with legal obligations;
- Provide treasury dashboards, accounts, cards, payments, FX and yield services;
- Process transactions, detect fraud and manage financial risk;
- Operate our AI treasurer features, including cash-flow forecasting and spend recommendations;
- Provide customer support and notify you about important account activity;
- Improve and secure our products, and send marketing communications where you have consented.
5. Legal basis for processing
We process personal data on the basis of performing our contract with you, complying with legal and regulatory obligations, pursuing legitimate interests (such as fraud prevention and product improvement), or where you have given consent.
6. Who we share information with
We do not sell your data. We share information only with:
- Banking and payment partners to hold funds, issue cards, process payments and execute FX transactions;
- Stablecoin issuers and custodians where you choose to hold or transact in digital assets;
- Identity and compliance providers to verify users and meet KYC/AML obligations;
- Cloud and analytics providers that host data and help us improve the Services under strict confidentiality;
- Regulators and law enforcement when required by law or to protect our rights.
7. International transfers
Some of our service providers are located outside the UK and EEA. When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses and adequacy decisions to protect your information.
8. Data security
We use encryption in transit and at rest, access controls, multi-factor authentication, network monitoring and regular security reviews. No system is completely secure, and we encourage you to protect your login credentials and report suspicious activity immediately.
9. Data retention
We keep your information for as long as your account is active and for a reasonable period afterwards to fulfil legal, regulatory, accounting and fraud-prevention requirements. When data is no longer needed, we delete or anonymise it securely.
10. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete information;
- Request deletion or restriction of processing;
- Object to certain processing, including direct marketing;
- Receive your data in a portable format;
- Withdraw consent at any time.
To exercise your rights, email privacy@systm.xyz.
11. Cookies and tracking
We use essential cookies to operate the Services and optional analytics cookies to understand usage. You can manage cookie preferences through your browser settings. For more details, see our Cookie Notice.
12. Children's privacy
The Services are intended for businesses and individuals aged 18 or older. We do not knowingly collect data from children.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Services. Continued use of the Services after changes means you accept the updated policy.
14. Contact us
If you have questions about this Privacy Policy or how we handle your data, please contact us at privacy@systm.xyz.