Last updated: September 7, 2026
Stabled Co. ("Stabled," "we," "our," or "us") is committed to protecting the privacy and security of your personal and business information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, website, and related services (collectively, the "Services"). Please read this policy carefully. If you do not agree with its terms, please discontinue use of our Services.
Third-Party Infrastructure Notice: The regulated conversion and on/off-ramp activity in each corridor is performed by licensed third-party providers, and identity verification is administered by our licensed verification provider. For those services, the relevant provider is the controller of the data it processes. Stabled is the controller of the company documentation it collects and stores under Section 1.2. Stabled receives and holds client funds in the course of executing a payment; how those balances are held is described in Section 2.2 of our Terms of Service, not in this policy, which covers information rather than funds.
We collect information necessary to provide our enterprise treasury and cross-border payment coordination services, comply with applicable laws and regulations, and improve your experience.
Stabled stores this documentation: Stabled collects, stores and retains the documentation below as its own records. Stabled is registered with FinCEN as a money services business and maintains its own AML/CFT program and customer due diligence procedure, each of which requires it to obtain and keep this documentation. Verification may be administered with the assistance of a licensed identity verification provider, and the documentation may be shared with the regulated provider executing your payment, but Stabled is not acting only as a conduit. See Section 5 for how long we keep it.
We do not sell your personal or business information. We share information only as described below.
Our licensed identity verification provider processes identity verification (KYC) on behalf of Stabled and the applicable on/off-ramp provider. Stabled retains its own copy of the underlying documentation as described in Sections 1.2 and 5.
We may disclose information to financial regulators, law enforcement, tax authorities, and other government bodies when required by applicable law, including the CNV, UIF, OFAC, FinCEN, and equivalent authorities in Brazil, Chile, Colombia, Mexico, and Peru.
We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ in transit, multi-factor authentication, role-based access controls, and regular penetration testing. To report a security concern, contact security@stabled.co.
Transaction metadata, account records, and KYC/KYB documentation are retained for no less than five (5) years following the later of the closure of your account or your last transaction. We retain them for longer where a longer period is required by applicable law, or where the records are subject to an audit, investigation, legal hold or regulatory request. Retention continues after our agreement with you ends, and closing your account does not delete these records.
Because we are registered with FinCEN as a money services business, we are required to keep these records for a minimum period, so we cannot act on a deletion request that would shorten it. Documentation is held in access-controlled systems and is available only to personnel who need it for compliance, onboarding or payment execution. We do not sell or license it, and we do not use it for marketing.
Argentine residents have rights under Argentina's Personal Data Protection Law (Law No. 25.326), including the right to access, rectify, and delete personal data held about them. Requests may be directed to privacy@stabled.co. Stabled is the controller of the company documentation described in Section 1.2. Where a regulated provider in the payment chain holds its own copy as controller, we will tell you which provider to contact. We cannot delete records within the retention periods in Section 5, because we are legally required to keep them; where we cannot act on a deletion request we will tell you which records we are retaining and on what basis.
To exercise rights regarding data for which Stabled is the controller, contact us at privacy@stabled.co. We will respond within 30 days.
Notice to Argentine users: Stabled is not registered as a VASP with the CNV. For Argentine users, fiat-to-USDC and USDC-to-fiat conversion services are provided by Sixalime SAU, registered with the CNV under Registration No. 21. Users interact directly with Sixalime SAU for regulated on/off-ramp transactions.
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-platform notice at least 14 days before they take effect.