Privacy Policy

Effective 18 September 2026. Last updated 18 September 2026. This policy covers the OpenCheque website only. Information exchanged between institutions through OpenCheque products, including Trust Exchange, is governed by the written agreements between Opencheque LLC, providers and subscribers. Each institution remains the controller of its own customer data and its own privacy notice applies.

Who is responsible for your information

Opencheque LLC is the controller of the personal information described in this policy. OpenCheque builds trust infrastructure for permissioned, consent-driven information exchange between institutions. Its products include Trust Exchange, the FinCrime Network and Locara.

If you would like our registered postal address, or you want to reach the person responsible for privacy enquiries, email hello@opencheque.io with Privacy in the subject line.

Information you give us

We collect the information you enter into the contact form on this website, or send us by email. That can include:

• your name
• your work email address
• your institution or organisation
• whether you are contacting us as a provider or data custodian, a subscriber institution, a partner, or otherwise
• anything you write in your message

Please do not send customer records, payment details, credentials, one-time codes, case details, or vulnerability details through the website form or by ordinary email. These are not a secure channel for that material.

Information we collect automatically

When you visit this website, our hosting provider records standard server log information, including your IP address, the pages requested, the date and time of the request, and technical details such as your browser type and operating system. This is ordinary web server activity and is used to serve the site and keep it secure.

This website sets no cookies. It uses no analytics, advertising, or tracking technology, and it does not store anything in your browser’s local or session storage. There is therefore no cookie banner and nothing for you to opt out of.

Third parties that receive information

We keep the number of third parties involved in this website deliberately small. The following providers process information on our behalf or receive it as a necessary part of serving the site:

Form delivery

The contact form is delivered by Formspree. What you enter in the form is transmitted to Formspree, which forwards it to us and retains a copy in our account so we can respond. Formspree also records technical information about the submission for abuse prevention.

Web fonts

The site loads its typefaces from Google Fonts. Your browser requests those font files directly from Google, and Google receives your IP address and standard request headers as part of that. Google states that it does not use these requests to build advertising profiles.

Hosting

The site is served by a hosting provider that processes the server log information described above on our behalf.

We do not sell personal information, and we do not share it with third parties for their own marketing.

Why we use your information

We use the information described above to:

• respond to your enquiry and route it to the right team
• arrange and carry out product demonstrations and technical evaluations
• discuss participation in the exchange as a provider, subscriber or partner
• provide documentation and other material you have asked for
• keep a record of our correspondence with you
• operate, secure, and improve this website
• meet our legal and regulatory obligations

Lawful bases

Where data protection law requires a lawful basis, we rely on the following.

Legitimate interests

Responding to a business enquiry, running our website, and keeping it secure are legitimate interests of our business. We have considered your interests and rights, and we limit what we collect to what a business enquiry reasonably requires.

Steps prior to a contract

Where you contact us to evaluate an OpenCheque product or to join the exchange, we process your information to take steps at your request before entering into a contract.

Legal obligation

We process information where we are required to do so by law, for example to keep accounting records or to respond to a lawful request.

International transfers

Our service providers may process information in a country other than your own, including the United States. Where information is transferred out of a country whose law restricts such transfers, we rely on the transfer mechanisms our providers have put in place, such as standard contractual clauses.

How long we keep information

We keep enquiry correspondence for as long as we need it to deal with your enquiry and to maintain a record of our business relationship, and then delete it or reduce it to what we are required to retain.

Server logs are kept for a short operational period and then discarded in the ordinary course. If you would like the retention period that applies to a specific record, ask us and we will tell you.

Security

This site is served over an encrypted connection, and information submitted through the form is transmitted over an encrypted connection to our form provider. Access to enquiry correspondence is limited to the people who need it to respond to you.

No method of transmission or storage is completely secure. This is why we ask you not to send sensitive material through a website form.

Your rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• to ask what personal information we hold about you and receive a copy
• to have inaccurate information corrected
• to ask us to delete information we no longer need
• to ask us to restrict how we use your information
• to object to processing we carry out on the basis of legitimate interests
• to receive information you gave us in a portable format
• to withdraw consent, where we relied on consent

To exercise any of these rights, email hello@opencheque.io with Privacy in the subject line. We may need to verify your identity before we act. If you believe we have not handled your information properly, you are entitled to complain to your local data protection authority.

Children

This website is aimed at professionals working in financial institutions, telecoms, public bodies and other organisations. It is not directed at children, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy as our practices or the law change. The date at the top of this page shows when it was last updated. Where a change is significant, we will make that clear on this page.