Privacy Policy

kae.one is operated by CAP Fintech Limited. Hong Kong company-formation services are delivered with the assistance of China and Partners Limited, a licensed Trust or Company Service Provider (TCSP licence TC007253).

This policy explains what personal data we collect when you use kae.one, why we collect it, who we share it with, and how long we keep it.

To incorporate a Hong Kong company on your behalf, we collect:

• Identity data — given name, surname, Chinese name (optional), passport number, country of issue, HKID (optional).
• Contact data — email address, phone number.
• Company data — proposed company name, business description, business nature code.
• Document files — scans of your passport, national ID, and proof of address.
• Payment data — handled by Stripe. We never see or store your card details.
• Technical data — a session cookie (kaeone_session), IP address, and basic device/browser metadata.

• To prepare and file form NNC1 with the Hong Kong Companies Registry via the TPSI electronic filing system.
• To carry out anti-money-laundering and customer-due-diligence checks (sanctions screening, PEP/adverse-media review).
• To classify your business activity (we use AI to suggest a business nature code, which you confirm before submission).
• To process your payment and issue receipts.
• To send you status updates and verification codes by email.
• To meet our record-keeping obligations under the Companies Ordinance (Cap. 622) and the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615).

We share the minimum necessary data with the following processors:

• Hong Kong Companies Registry — submission of NNC1 and supporting information via the TPSI API.
• Stripe, Inc. — payment processing.
• Amazon Web Services (AWS S3) — encrypted document storage. Documents are stored in the United States (us-east-1 region).
• Resend — transactional email delivery.
• Anthropic and Google — AI-assisted business-description polishing and customer chat. We do not send identity documents to these providers.
• Neon (PostgreSQL) — encrypted application database.

We do not sell your data and we do not share it for advertising.

Hong Kong law requires us to retain customer due-diligence records for at least five years after the end of the business relationship, and company-formation records for at least seven years. We keep your data only for as long as required by law or by our legitimate business needs.

Subject to legal retention obligations, you have the right to access, correct, or request deletion of the personal data we hold about you. To exercise these rights, email support@kae.one.

You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.

We use a single session cookie (kaeone_session) to keep you signed in. It is HTTP-only, sent only to our own domain, and expires after seven days. We do not use third-party advertising or analytics cookies.

Data in transit is encrypted with TLS. Documents are encrypted at rest in AWS S3. Access to your data is restricted to staff who need it to process your application.

We may update this policy from time to time. The “last reviewed” date above will change when we do. Material changes will be notified by email.

Questions? Email support@kae.one.