Last updated: September 29, 2026
Privacy & Data Statement
This statement summarizes the data types FlashVCC processes to provide business wallet, virtual card and transaction management, and how they are protected. Where a contract or applicable law is stricter, that prevails.
Data Processed
May include business account profiles, authorized user profiles, cardholder details, masked card information, orders, transactions, fund records, security logs and the compliance information needed to issue cards.
Purposes of Processing
Data is used for identity and permission verification, card issuance and lifecycle management, fund and fee accounting, transaction reconciliation, risk control, customer support and keeping audit evidence as required by law.
Sensitive-data Protection
Lists and notifications show masked card numbers by default. Viewing full card details requires extra verification; never screenshot, copy or forward via chat the full card number, CVV, passwords or two-factor seeds.
Service Providers
Within what is necessary to issue cards, query transactions and process funds, relevant data may be submitted to the configured issuing or payment service provider. The platform never exposes full card details for display purposes.
Retention & Security Records
Orders, ledger, audit and idempotency records are retained per business and compliance needs to prevent duplicate charges and support dispute review. Deletion or correction requests require identity and permission verification.