What Privacy-First Actually Means When It's Written Into Policy

The marketing-vs-policy gap
'Privacy-first' is a phrase used loosely across fintech marketing, often disconnected from what the actual published policy specifies about data scope and retention.

What BeeXpay's policy actually scopes
Data collection is limited to identity information, KYC documentation, transaction history, and technical logs required for account security and regulatory compliance — not broad behavioral or personalization data.

Retention specifics
Inactive accounts are deleted after 3 years; KYC-specific data is retained 5 years post-closure per regulatory requirement, then removed. This is a compliance timeline, not a company preference.