Privacy Policy

1. Individual end-user PII

We collect name, date of birth, government-ID type and number, issuing jurisdiction and expiry, citizenship, residence, residential address, tax residency and TIN where applicable, PEP status, source of funds and description, transaction purpose, expected monthly volume, email, telephone, request IP, timestamp, and consents.

2. Corporate entity information

We collect legal name, registration jurisdiction, Tax ID/EIN, registered address, business description, directors and control persons, full UBO ownership details, settlement-authorized account information, primary contact data, request IP, timestamp, and consents.

3. Institutional participant information

We collect all Corporate-KYB information plus regulatory licenses and registrations, authorized trading personnel, dedicated compliance officer information and email, internal AML or compliance policy excerpts, EDD materials obtained through secure follow-up, request IP, timestamp, and consents.

4. Purpose of use

Information is used for KYC, Corporate-KYB, Institutional-KYB and EDD, sanctions screening, risk assessment, transaction monitoring, Travel Rule compliance, service administration, fraud prevention, dispute handling, and regulatory reporting.

5. Sharing scope

We share only as needed with verified transaction counterparties for RFQ and settlement, regulated service providers, compliance technology vendors, Bridge or other due-diligence platforms, banks or settlement partners, auditors, regulators, and law enforcement.

6. Five-year retention

Application records, audit logs, and due-diligence materials obtained through the secure follow-up process are retained for five years or longer where law requires.

7. CCPA scope

CCPA rights apply to natural-person individual end-users who are California residents and to the extent the CCPA applies. Corporate-entity and institutional-participant records are generally business information and may not constitute personal information under the CCPA.

8. Security

We use access controls, encryption in transit, restricted administrative access, logging, and vendor review. No security control guarantees prevention of all unauthorized access.

9. Cookies, international transfers, and children

See the Cookie Policy. Data may be processed in the United States and other jurisdictions where service providers operate, subject to lawful safeguards. Services are not offered to children.