HEVN, inc procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Your information may be transferred to and processed in countries other than the country in which you reside, including the United States, Switzerland, and the European Economic Area. These countries may have data protection laws that differ from the laws in your jurisdiction.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ When we transfer your data internationally, we implement appropriate safeguards to ensure that your information remains protected. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement (UK IDTA) for transfers from the United Kingdom, adequacy decisions, or other legally recognized transfer mechanisms.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Transaction Data: Retained as required by applicable laws and regulations, including AML record-keeping requirements (minimum 5 years after the end of the business relationship)” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We do not maintain long-term storage of identity documents, government-issued IDs, or other sensitive verification materials.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Your data security is a priority. HEVN collects and retains only the minimum personal data necessary to provide the Services and to comply with applicable legal obligations.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Technical and Usage Data: Retained for the period necessary for security, analytics, and service improvement purposes” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We collect different categories of information depending on how you interact with our Services. Information is classified as either retained data (stored for the duration of the account relationship) or** transient verification data**(collected for KYB/KYC purposes, shared with verification providers as part of the user-initiated account opening process, and deleted from HEVN's systems after verification is complete).” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Government-issued identification documents (passport, national ID, driver's license)” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ When your data is no longer required, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ The following information is collected solely for identity and business verification, transmitted to regulated third-party providers as part of the user-initiated account opening process, and deleted from HEVN's systems once verification is complete across all providers:” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ HEVN applies differentiated retention periods based on data category:” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Transient Verification Data (identity documents, business documents, financial statements, government-issued IDs): Deleted from HEVN's systems after KYB/KYC verification is complete across all providers” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain on a long-term basis only basic account information required for ongoing service delivery: your name, email address, phone number, and wallet address. All other personal data — including identity documents, financial statements, and verification materials — is collected solely for KYB/KYC verification, transmitted to regulated third-party verification providers as part of the account opening process you initiate, and deleted from HEVN's systems after the verification process is complete across all providers.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Retained Account Data (name, email, phone number, wallet address): Retained for the duration of the account relationship and for a reasonable period thereafter as required by applicable law” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ HEVN acts as an independent technology provider. Where regulated financial institutions require personal data to provide fiat conversion or banking services, such institutions act as independent controllers under their own regulatory frameworks.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Service Providers: Technology vendors, cloud hosting providers, customer support platforms, and analytics providers who assist in operating our Services” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Our Services may contain links to or integrate with third-party websites, applications, or services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you interact with.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Your use of banking and financial products through our platform may be subject to additional privacy policies of our banking partners, which will be provided to you when you open an account or apply for related services.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share your information with the following categories of third parties:” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Note: HEVN provides access to financial products through regulated banking partners. Your use of accounts, cards, and related financial products may also be subject to the privacy policies of our banking and payment processing partners, which will be disclosed to you during onboarding.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Banking and Payment Partners: Regulated financial institutions that provide banking infrastructure, including account services, card issuance, and payment processing” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Digital Asset Conversion Providers: When users initiate Digital Asset conversion to fiat currency, HEVN shares necessary transaction data with regulated conversion providers to facilitate settlement” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Regulatory and Government Authorities: Tax authorities, financial regulators, law enforcement agencies, and other government bodies as required by law or legal process” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We are transparent about how your data is shared. Personal and identity data is shared with third parties only for KYB/KYC verification and regulatory compliance purposes and only as part of the user-initiated account opening and verification process . We never share your personal data for marketing, advertising, or profiling.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Identity and Business Verification Providers: Third-party services that conduct KYC/KYB checks, identity verification, and sanctions screening” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.