Privacy Policy
This Privacy Policy explains how personal data is handled when you use the Helva platform (the "Platform"). It applies together with the Terms of Service. It is not a loan offer, and it is not tax advice.
Sumsub is Sum and Substance Ltd (United Kingdom), the identification provider we use. MROS is the Money Laundering Reporting Office Switzerland. Other terms have the meaning given in the Terms of Service.
1. Controller
The controller is the operator: the Swiss company named in the imprint. Privacy contact: privacy@helva.finance.
2. What we collect
We collect the minimum the onboarding rules require. We do not ask you to retype an identity document we already have, and we do not ask for purpose of relationship, expected monthly volume, or a list of currencies. Those follow from the role you chose and from the loan itself.
| What | Where it comes from | Why |
|---|---|---|
| Name, date of birth, nationality, document images, liveness | Sumsub | Identification |
| Phone number, checked by one-time code | Sumsub | Attribution of the declaration |
| Occupation; source of funds (and a short explanation only if you choose "other") | Questionnaire | Client profile |
| US person: yes or no | Questionnaire | We do not serve US persons |
| Beneficial owner: you, or someone else. If someone else: their name, date of birth, nationality, and domicile | Questionnaire | Beneficial-owner declaration |
| Name, date of birth, nationality, domicile address | Video call with us | Video identification |
| Wallet address you use to lock collateral | The Platform | The loan |
| Loan amount, currency, and your role (borrower or lender) | The loan request | The loan, and the profile of the relationship |
Giving false information on the beneficial-owner declaration is a criminal offence (article 251 of the Swiss Criminal Code).
3. Where each copy lives
| Copy | What it is | How long |
|---|---|---|
| Helva application | Your name, so the account can run. Not the identification archive. We do not store document images, liveness media, or the Sumsub dossier on the application server. | For the life of the account |
| Sumsub | Working copy of the online identification | Until we have filed the Swiss record and then ask Sumsub to delete it. |
| Swiss AML file | Sumsub's applicant report, plus the recording of our video identification, plus the acceptance decision | 10 years after the relationship ends. This is a legal duty. |
| A laptop download of that report or recording | Transient | Wiped after the Swiss copy has been checked |
The Swiss file is the record. Sumsub is the identification provider, not the archive.
4. Sumsub
Sumsub performs the online identification under an outsourcing agreement. The sequence is:
- You complete online identification, the short questionnaire, and the phone check with Sumsub.
- Sumsub tells us the result. The web application keeps your name. It does not keep the document images.
- You complete video identification with us. Until that call is done, and until a person accepts the relationship, you are not accepted.
- After the video, we download Sumsub's applicant report, file that report and our video recording in an encrypted Swiss data archive, and check that the Swiss copies open.
- We ask Sumsub to delete the applicant data it holds, including document images and biometric data.
Sumsub is established in the United Kingdom. The transfer is for this identification, under the outsourcing agreement. Sumsub is not where the ten-year file is kept.
5. Why we process data
| Basis | What |
|---|---|
| Legal duty (Swiss anti-money-laundering law) | Identification, the client profile, monitoring, a report to MROS if the legal test is met, ten-year retention |
| Contract | Operating the account, settling a loan, writing to you about that loan |
| Legitimate interests | Fraud prevention, security of the Platform |
| Consent, where we actually ask for it | Optional cookies or optional marketing mail. Withdrawal stops the optional processing. It does not erase the AML file. |
6. Who receives data
We do not sell personal data.
| Recipient | Why |
|---|---|
| Sumsub | Online identification, until we ask them to delete it |
| The other party to your loan | The loan documents |
| The bank that executes the fiat payment | Settlement |
| MROS | Only if the legal test for a suspicious-activity report is met |
| A Swiss prosecution or supervisory authority, or a foreign request that arrives through an official channel | A lawful request |
| Our self-regulatory organisation and its audit firm | Supervision and the AML audit |
What we report, and what we do not, is in the Terms of Service.
7. Your rights
Under the Swiss Federal Act on Data Protection you can ask for access, correction, deletion, restriction, or objection, and in some cases a portable copy. Deletion and objection do not override the ten-year retention of the AML file.
Write to contact@helva.finance. We aim to answer within a day. You can also complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).
8. Automated processing
Transaction monitoring can flag a payment for a person to review. Passing or failing an identity check, and accepting or refusing a relationship, is not decided by an algorithm alone.
9. A later identification method
We intend to move identification toward Swiss-based and/or zero-knowledge methods. That is a plan. The process in this notice is the one we run now.
10. Contact
Questions, complaints, and data-protection requests: contact@helva.finance.
The operator's name, seat, register details, and telephone number are in the imprint. They are not repeated here.
If you are not satisfied with our answer, you can contact the Federal Data Protection and Information Commissioner on a data-protection complaint.
Version 2026-09-22.