Privacy Policy – Fraud Shield

Fraud Shield (“Fraud Shield”, “Company”, “we”, “our”, “us”) is committed to protecting privacy and handling information responsibly. This Privacy Policy explains how information is handled when you visit our website, interact with us, or use our technology platform, APIs and related services.

By using this website, you agree to this Privacy Policy.

1. WHO THIS POLICY APPLIES TO

This Policy applies to:

• Website visitors
• Prospective customers and partners
• Clients and resellers using our services
• Vendors and service providers
• Individuals whose information may be processed by our clients through our technology

This Policy applies only to Fraud Shield’s website and platform.

2. OUR ROLE AS TECHNOLOGY SERVICE PROVIDER

Fraud Shield acts strictly as a technology service provider and technology enabler.

Our clients determine:

• what data is submitted
• the purpose of processing
• lawful basis and consent
• how outputs are used

Fraud Shield processes information only based on client instructions.

In most cases:

• Clients act as Data Fiduciaries / Controllers
• Fraud Shield acts as a Data Processor

2A. STATELESS PROCESSING MODEL

Fraud Shield operates as an on-demand technical processing platform.

Except for limited technical logs required for security and compliance:

• We do not maintain consumer databases
• We do not build user profiles
• We do not use personal data for our own business purposes
• We do not independently decide how data is used
• We do not establish any relationship with end individuals

Data submitted via APIs is processed in real-time on client request and returned to the client.

Fraud Shield does not determine:

• the purpose of processing
• the legal basis for processing
• how results are used

These responsibilities rest entirely with the client.

3. INFORMATION WE COLLECT

3.1 Information You Provide

When you contact us, request a demo, or undergo onboarding, we may collect:

• Name
• Business email address
• Phone number
• Company name
• Job title
• Business and compliance documents
• Vendor or customer onboarding information
• Any information shared via forms or email

3.2 Automatically Collected Information

When you visit our website:

• IP address
• Browser and device information
• Website usage and logs
• Cookies and analytics data

3.3 Client-Submitted Data via APIs

Clients may submit information to our platform for fraud prevention, verification and risk assessment. This may include:

• Identity information
• Contact information
• Device/network signals
• Publicly available data
• Fraud or risk indicators

This information is processed strictly on behalf of clients.

3.4 No Independent Data Collection

Fraud Shield does not independently collect personal data about individuals.

All personal data processed by our platform is:

• submitted by clients, or
• obtained from public or third-party sources based on client instructions.

Fraud Shield does not initiate searches, investigations, or monitoring activities.

4. PUBLIC & THIRD-PARTY DATA PROCESSING DISCLAIMER

Our technology may process information obtained from:

• publicly available sources
• licensed data providers
• third-party vendors

Fraud Shield acts solely as a technical intermediary processing such data upon client request.

Fraud Shield does not:

• own such data
• control such data
• guarantee accuracy or legality of such data
• determine whether such data should be accessed

Clients assume full responsibility for lawful access and use.

5. PURPOSE OF PROCESSING

Information may be used to:

• Provide and maintain services
• Respond to inquiries
• Maintain platform security
• Prevent fraud and misuse
• Maintain audit logs
• Comply with legal obligations

5A. BUSINESS CONTACT & DUE-DILIGENCE DATA

Fraud Shield may process business and professional contact information of:

• prospective customers
• existing customers
• vendors and service providers
• partners and resellers
• representatives of organizations interacting with us

This information may be received:

• directly from the individual or organization
• from the organization they represent
• from publicly available business sources

Types of data may include:

• Name
• Business email address
• Business phone number
• Organization name
• Job title or designation
• Corporate registration details
• KYC / KYB and due-diligence documents shared for onboarding

Purpose:

• customer and vendor onboarding
• business due diligence and risk assessment
• fraud prevention and misuse prevention
• compliance with legal obligations
• maintaining contractual relationships

This processing is based on legitimate business interests and legal obligations.

6. LEGAL BASIS (INDIA – DPDP ACT)

Processing may occur based on:

• Consent obtained by our clients
• Legal obligations
• Legitimate interests (security and fraud prevention)

Clients are responsible for obtaining lawful consent or authorization.

7. CLIENT RESPONSIBILITY FOR LAWFUL USE

Clients are solely responsible for:

• obtaining consent or legal authorization
• complying with privacy and data protection laws
• lawful onboarding of their customers
• lawful use of outputs generated
• informing individuals where required

Fraud Shield does not verify legality of each API request.

8. INFORMATION SHARING

Information may be shared with:

• Cloud and infrastructure providers
• Service vendors and contractors
• Affiliates and group companies
• Legal and regulatory authorities when required

9. LAW ENFORCEMENT REQUESTS

We may disclose information when required to:

• comply with law
• respond to government requests
• protect rights and safety
• prevent misuse or fraud

10. DATA RETENTION & STORAGE

Fraud Shield follows a minimal-retention architecture.

We do not maintain databases of personal data processed via APIs.

Limited retention may occur only for:

• security monitoring
• abuse prevention
• audit logs
• legal compliance

Clients are responsible for storing and managing any data they collect.

11. DATA SECURITY

We implement safeguards including:

• encryption in transit
• access controls
• monitoring and logging

No system is completely secure.

12. PRIVACY RIGHTS

Individuals may request:

• access
• correction
• deletion
• withdrawal of consent

Requests for client-submitted data should be directed to the relevant client organization.

13. MARKETING COMMUNICATIONS

You may opt-out of marketing emails by contacting us.

14. THIRD-PARTY LINKS

We are not responsible for external websites linked from our site.

15. CHILDREN’S PRIVACY

Services are not intended for individuals under 18.

16. COOKIES

We use cookies to:

• ensure website functionality
• analyze traffic
• improve performance and security

Cookies can be disabled via browser settings.

17. POLICY UPDATES

We may update this Privacy Policy periodically. Updates will be posted on this page.

18. GOVERNING LAW

This Privacy Policy is governed by Indian law. Courts of Ernakulam, Kerala shall have jurisdiction.