01Purpose
This KYC ("Know Your Customer") Policy explains when KnoxProxy verifies a customer's identity, what information that involves, and how it is used. It exists to prevent fraud, meet our obligations as a payment-processing merchant, and keep sanctioned entities off the network.
02When verification is required
Identity verification is not required to create an account or make a first purchase. It is triggered by:
- Certain plans -- Enterprise and other plans that require verification as a condition of the plan
- Higher-risk usage -- volume or usage patterns our fraud and abuse systems flag for review
- Regulatory triggers -- activity subject to sanctions, anti-money-laundering, or export-control obligations
03Information we collect
Where verification is required, we collect a government-issued identity document and, where applicable, proof of address or business registration details -- the same KYC data category described in our Privacy Policy.
04Verification provider
KYC verification is performed via Sumsub, our identity-verification processor. Sumsub processes and stores submitted documents on our behalf under a data processing agreement; KnoxProxy does not separately store copies of the raw documents.
05Sanctions screening
All accounts are screened against OFAC and other applicable international sanctions lists. Accounts matched to a sanctioned individual, entity, or jurisdiction are blocked or geoblocked as required by law, independent of whether full KYC verification has otherwise been completed.
06Data retention and your rights
KYC documents are retained per regulatory requirements, consistent with the retention schedule in our Privacy Policy. You may exercise your data-subject rights, including access and deletion requests subject to legal retention limits, by contacting dpo@knoxproxy.com.