WavCash Privacy Notice

Version current · Updated 25 July 2026

1. Controller

2. Data processed

For WavCash, Wavswap processes account identifiers and contact details; Stripe or PayPal provider, customer, subscription, invoice or payment references; payment status, date, currency, charged amount, eligible amount, tax, discount, fee, refund and chargeback information available from the provider; tier and eligible-payment count; available, pending and reserved balances; reward, reversal, correction and administrator-audit records; and technical security logs.

Wavswap does not need or store full card details for WavCash. Stripe and PayPal process payment credentials under their own privacy notices.

3. Purposes and legal bases

• Calculate, display and administer the requested loyalty reward: performance of the user agreement.
• Verify payments, prevent duplicates, correct user matching, protect accounts and detect fraud: Wavswap’s legitimate interests in secure and accurate operation.
• Handle refunds, chargebacks, complaints and legal claims: contract performance and legitimate interests.
• Keep tax, invoice and accounting records: compliance with legal obligations.

WavCash data is not used for unrelated direct marketing. Wavswap does not make solely automated decisions about WavCash that produce legal or similarly significant effects without meaningful review.

4. Recipients and international transfers

Data may be shared where necessary with Stripe, PayPal, hosting, security, analytics, professional advisers, payment or payout providers if separately activated, and competent authorities. Some providers may process data outside the European Economic Area under their applicable contractual and transfer safeguards.

5. Retention

Active balance and programme records are retained while the account or programme relationship continues. Payment, invoice, tax and accounting records are generally retained for seven years where Dutch tax rules require this. Records may be kept longer where necessary for unresolved chargebacks, fraud investigations, legal claims or a legal hold. Data that is no longer needed is deleted or irreversibly minimised.

6. Security

Wavswap uses authenticated access, HTTPS, permission-separated administration, masking, audit trails, duplicate protection and restricted diagnostics. No security measure is perfect, but access is limited to what is needed for operation, support, accounting and legal compliance.

7. Your rights

Subject to the GDPR, users may request access, correction, deletion, restriction, portability or objection. Some payment, ledger, fraud and accounting information cannot be deleted immediately where retention is legally required or necessary to defend claims. Identity may be verified before account or payment information is disclosed.

Users may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.

8. Payout-request data and current feature scope

Balance visibility and earning may be enabled. Public withdrawal remains disabled. A selected administrator test account may use the non-public request workflow to verify the technical controls.

If withdrawal requests are separately activated, Wavswap may process the requested amount, payout method, masked destination, encrypted destination details, a one-way destination fingerprint, legal name, country, terms version and acceptance time, request IP and user-agent hashes, risk flags, identity/ownership review status, administrator notes, external payout reference and status history.

The purpose is to perform the requested payout process, reserve and release balances correctly, prevent duplicate or fraudulent requests, verify ownership, document decisions, manage refunds and chargebacks, meet provider and legal obligations and resolve complaints. Full destination details are encrypted and are not displayed in ordinary admin lists; only masked information is shown. Payout details are shared with PayPal, the relevant bank or another payout provider only when necessary to process an approved payout.

Identity documents should not be sent through the general Contact form. Where an identity check is legally or operationally necessary, Wavswap will provide a dedicated secure method and will collect only the information needed for that check.

9. Related documents

See the main Privacy Policy, WavCash Policy, Terms of Service, How WavCash works and Facebook data deletion instructions.