Privacy Policy

1. Who we are

Fluvius is a product of ebizmarts Corp, a Florida corporation with a principal place of business at 20900 NE 30th Avenue, Suite 200, Aventura, Florida 33180, United States (“Fluvius,” “we,” “us,” “our”). We are the data controller for personal information collected through our website at fluvius.cash, our platform, and our Stripe App.

2. Scope of this policy

This policy applies to personal information we collect from:

• Visitors to fluvius.cash and any Fluvius marketing properties.
• Users of the Fluvius platform — buyers, vendors, and authorized representatives of business customers.
• Users of the Fluvius App for Stripe who install and authenticate the app inside their Stripe Dashboard.

It does not cover third-party services we link to. Those services have their own privacy policies.

3. Information we collect

From website visitors

When you visit fluvius.cash we receive standard server-log information (IP address, user-agent, referrer, timestamps, pages requested) as part of normal web operation. We use a country-level IP-location database to suggest a locale; this happens on the server and the result is not stored against an identifier. We do not run third-party analytics, advertising pixels, or non-essential cookies on the marketing site.

If you contact us via the email addresses published on the site (for example hello@fluvius.cash, info@fluvius.cash), we receive the contents of your message and your email address.

From platform users

When an authorized representative registers a business on Fluvius, we collect: name, business email address, role, authentication credentials, the business’s legal name, registered address, and identifiers required to comply with Know-Your-Business (KYB) and anti-money-laundering obligations.

In the course of using the platform we collect: payment agreements, invoice metadata, counterparty details you provide about your vendors, bank or financial-account identifiers necessary to move funds, approval activity, and audit logs of actions taken inside the product.

From the Stripe App

When you install and authorize the Fluvius App for Stripe, Stripe shares with us the data scoped by the OAuth permissions you grant — which typically includes your connected Stripe account ID, business profile, balances, payments, and payout information necessary to operate the app. We do not receive full card numbers. The exact scopes are disclosed at install time and listed on the app’s Stripe Marketplace listing.

4. How we use information

• To deliver, operate, and secure the Fluvius platform.
• To create and administer payment agreements between you and your vendors, and to move funds through payment rails such as Stripe.
• To meet KYB, anti-money-laundering, sanctions-screening, and tax-reporting obligations that apply to us as a financial services provider.
• To communicate with you about your account, respond to requests, send transactional notifications, and provide support.
• To detect, investigate, and prevent fraud or abuse of the platform.
• To comply with applicable law and legal process.
• With your consent, to send you product updates or marketing communications — you can unsubscribe at any time.

5. Legal bases (UK and EU users)

Where UK GDPR or EU GDPR applies, we process personal information on the following legal bases: (a) performance of a contract with you, (b) compliance with our legal obligations, (c) our legitimate interests in operating, securing, and improving the platform and preventing fraud, and (d) where required, your consent. You can withdraw consent at any time by contacting info@fluvius.cash.

6. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers and subprocessors. We rely on vetted providers to host infrastructure, store data, send email, monitor errors, and process payments. Today the primary named subprocessor is Stripe, which we use to move funds and power the Fluvius App for Stripe. An up-to-date list of subprocessors is available on request at info@fluvius.cash.
• Counterparties to your payment agreements. To operate the product we share the information required to effect a payment agreement with the other party — for example, the vendor you are paying receives your business name, the agreement amount, and the maturity date.
• Legal and safety. We may disclose information to comply with law, respond to lawful requests, enforce our terms, or protect the rights, property, or safety of Fluvius, our users, or the public.
• Corporate transactions. If Fluvius or its assets are involved in a merger, acquisition, financing, or sale, personal information may be transferred as part of that transaction, subject to the protections of this policy.

7. International transfers

Fluvius is operated from the United States. Personal information we collect is processed and stored in the United States and in other jurisdictions where our service providers operate. When we transfer personal information from the United Kingdom, European Economic Area, or other jurisdictions with cross-border transfer rules, we rely on lawful transfer mechanisms — including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses — and take reasonable steps to protect the information consistent with this policy.

8. Data retention

We retain personal information for as long as it is needed to provide the platform and meet our legal obligations. As a general rule:

• Financial and transaction records are retained for at least seven (7) years after the end of the relationship to comply with tax, accounting, and anti-money-laundering rules.
• Account and identity information is retained for the life of the account and then for the period required by applicable law.
• Marketing data is retained only while it is useful, and in any event deleted within thirty (30) days of a deletion request or unsubscribe.
• Server logs are retained for a short rolling window for security and debugging.

9. Your rights

Rights for UK and EU users

Under the UK GDPR and EU GDPR you have the right to access, correct, delete, restrict, or object to our processing of your personal information, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk).

Rights for California residents

Under the California Consumer Privacy Act (as amended by the CPRA) you have the right to know what personal information we collect and how we use it, the right to request correction or deletion, the right to limit the use of sensitive personal information, and the right to non-discrimination for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising, so no “Do Not Sell or Share” election is required — but you may still contact us to exercise any of the other rights above.

How to exercise your rights

Contact info@fluvius.cash from the email address associated with your account or business. We may need to verify your identity before we can respond. We will respond within the timeframe required by applicable law.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction — including encryption in transit, access controls, audit logging, and a double-entry ledger that records every state change. No system is perfectly secure, and we cannot guarantee absolute security; please protect your account credentials and contact us immediately if you suspect unauthorized access.

11. Children

Fluvius is a platform for businesses. It is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact info@fluvius.cash and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date at the top of the page and, for material changes, provide additional notice (for example by email or a notice inside the product). Continued use of Fluvius after an update constitutes acceptance of the revised policy.

13. Contact us

For any question about this policy or our handling of your personal information, contact: