Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account, complete identity verification (KYC), and use our services. This includes your full name, email address, phone number, date of birth, government-issued identification, proof of address, and payment instructions for recipients.

We also collect information automatically: device identifiers, IP address, browser type, usage logs, and transaction metadata. Our compliance partners (Bridge and Didit) may collect biometric data during the identity verification process solely for the purpose of compliance verification.

2. How We Use Your Information

We use your information to: create and maintain your account; verify your identity and comply with AML/CTF regulations; process transfers and payments; communicate with you about your account and transactions; detect, prevent, and investigate fraud or suspicious activity; and meet legal, regulatory, and audit obligations.

3. Sharing of Information

We share your information only when necessary: with our payment and compliance infrastructure providers (Bridge, Didit) to execute transfers and run KYC/AML checks; with banking partners and blockchain networks to settle transactions; with authorities when required by law or regulation; and with service providers who help us operate the platform under strict contractual confidentiality obligations.

We never sell your personal data to third parties.

4. International Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and the European Union. Where required, we ensure such transfers are protected by appropriate safeguards such as Standard Contractual Clauses or an equivalent legal mechanism.

5. Data Security

We protect your data with 256-bit encryption in transit and at rest, SOC-2 compliant infrastructure, strict access controls, and continuous monitoring. Sensitive payment credentials are tokenized and never stored in plaintext. Despite these measures, no system can be guaranteed fully secure.

6. Data Retention

We retain your personal data for as long as your account is active and for the period required by applicable financial and AML regulations after closure — typically five to seven years, or longer where mandated by law. Verification records may be retained for the full regulatory term even if you close your account.

7. Your Rights

Depending on your jurisdiction (e.g. GDPR/UK GDPR), you may have the right to access, correct, export, restrict, or delete your personal data, and to object to or withdraw consent for certain processing. To exercise these rights, contact us at the details below. We will respond within the statutory timeframe and may need to verify your identity first.

8. Cookies and Tracking

We use essential cookies to keep you logged in and to remember your language and theme preferences. We may use analytics cookies to understand how the platform is used. You can control cookies through your browser settings; disabling them may affect some features.

9. Children’s Privacy

The platform is not intended for individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy to reflect changes in our practices, products, or legal requirements. We will notify you of material changes via the app or by email. Continued use after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

Questions about this Privacy Policy or your personal data can be sent to our support team through the in-app help center or by mail to our registered address. We aim to respond within 30 days.

Operator: First CH of the Nazarene of Vallejo, LLC. Registered address: 530-B Harkle Road, Ste 100, Santa Fe, NM 87505, USA.