Privacy Policy

Last updated: 28 October 2026

Template — legal review required

This document is a starting template. It must be reviewed and completed by qualified counsel for your company, jurisdiction and provider agreements before live operation.

1. Controller

[Company legal name and contact details, data protection contact.]

2. Data we process

Account data: name, email address, hashed password, two-factor settings, sign-in metadata (IP address, user agent).
Verification data you submit: legal name, date of birth, address, country of residence, nationality, identity document type and issuing country.
Transaction data: card orders and top-ups, payment references, blockchain addresses and transaction hashes, card references, masked card numbers and card transaction history reported by the provider.
Support data: messages and attachments you send to our support team.

3. Data we do not store

We do not store full card numbers or CVV codes. One-time verification codes relayed for your card are stored encrypted for a short period and are visible only to you.

4. Sharing

We share data with our payment and card providers as needed to provide the Service (for example, the cardholder email address when a card is requested), with service providers under contract, and with authorities where legally required.

5. Retention

Financial and audit records are retained for the periods required by applicable law. [Specify periods.]

6. Your rights

[Describe access, rectification, erasure, restriction, portability and objection rights applicable in your jurisdiction, and how to exercise them.]

7. Security

See our Security page for an overview of the measures we apply.