We collect identity, contact, ownership, source-of-funds, transaction, device, and communication information needed to evaluate and service client relationships.

For venture funds, family offices, founders, AI companies, solar platforms, and energy businesses, we may also collect investor, beneficiary, project, vendor, and portfolio-company information where required for diligence or payment operations.

Information is used to verify identity, assess risk, maintain accounts, process cross-border payments, support wealth and treasury services, comply with legal obligations, and protect clients from fraud.

We may use aggregated operational data to improve controls, reporting, service reliability, and client experience.

Information may be shared with regulated affiliates, banking partners, payment networks, verification providers, auditors, legal advisers, and public authorities where permitted or required.

Arralore applies access controls, encryption, monitoring, and banker-led review for sensitive account, custody, and payment workflows.

Clients may request access, correction, restriction, or deletion of personal information where local law permits.

Some information must be retained to satisfy anti-money laundering, tax, sanctions, dispute, and regulatory recordkeeping obligations.