Privacy Policy
Last updated: 2026-11-07
1. Who We Are
Liberation.Services is operated by Liberation LLC, a company registered in the United States. We provide bank account opening and residency permit services in various countries.
Liberation Travel Ltd. is our company in Seychelles: House of Francis, Room 303, Ile du Port, Mahé, Seychelles; Tax number 234679. It issues the invoice to a customer who is a citizen or tax resident of the United States. Liberation LLC issues the invoice to everyone else.
Contact: info@liberation.travel
2. What Data We Collect
We collect the following personal data:
- Account data: name, email address, nickname, preferred language
- Contact data: legal address, delivery address, Signal phone number
- Passport data: full name, passport number, nationality, date of birth, place of birth, issue/expiry dates (extracted from MRZ zone)
- Payment data: transaction references processed by our own payment system at invoices.liberation.services, which keeps payment data encrypted and sees blockchain transactions only for the addresses it issues (we do not store payment card details). BTCPay Server is the software behind Bitcoin on-chain, Monero and Zcash payments. An invoice issued before this payment system was introduced may come from an outside payment processor, which then holds the payment data for that invoice. If such an invoice is still open, it can be paid there until early December 2026.
- US tax status: your answer to whether you are a citizen or tax resident of the United States
- Technical data: IP address (for language detection), browser user agent
3. Why We Process Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing our services (bank account opening, residency permits) | Contract performance (Art. 6(1)(b)) |
| Processing passport data for document generation | Explicit consent (Art. 9(2)(a)) — passport data is special category data |
| Payment processing | Contract performance (Art. 6(1)(b)) |
| Asking whether you are a citizen or tax resident of the United States, to decide which of our companies issues your invoice (our US company may not invoice US tax residents) | Legitimate interest (Art. 6(1)(f)) |
| Sending service notifications (Signal, email) | Legitimate interest (Art. 6(1)(f)) |
| Automatic language detection (GeoIP) | Legitimate interest (Art. 6(1)(f)) |
4. Passport Data — Special Category
Your passport scan is processed locally on our server to extract MRZ (Machine Readable Zone) data. The passport image is NOT stored — it is processed in memory only. Only the extracted text data (name, passport number, dates, etc.) is stored in our encrypted database to generate required legal documents (Power of Attorney).
5. Data Security
All personal data is encrypted at rest using AES-256 (Fernet) encryption. Encryption keys are stored in volatile memory (RAM) only and are never written to disk. The database itself is stored on encrypted storage. All connections use TLS/SSL encryption.
6. International Data Transfers
As a US-based company serving EU customers, your data may be transferred to:
- United States — where our company is registered
- Service provider countries (Georgia, Kyrgyzstan, Paraguay, Uruguay, Panama) — only the data necessary for completing your ordered service
- Seychelles — for invoices issued by Liberation Travel Ltd. to citizens or tax residents of the United States
For EU residents, these transfers are conducted with appropriate safeguards including your explicit consent at the time of purchase. You will be asked to consent to these transfers before checkout.
7. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account deletion
- Passport data: retained for the duration of service delivery, then deleted within 90 days of order completion
- Payment records: retained for 7 years (legal/tax obligation)
- Consent logs: retained for 5 years (to demonstrate GDPR compliance)
8. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise any of these rights, contact us at info@liberation.travel. We will respond within 30 days.
9. Cookies
We use only essential cookies required for the website to function (session management, CSRF protection, language preference). We do not use tracking or advertising cookies. See our Cookie Policy for details.
10. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EU residents, this is the data protection authority in your country of residence.