Privacy policy

For an account: your email address, and a name if you provide one. For verification: your full name, date of birth, nationality, residential address, document type and number, and the document images and photograph you upload.

We also record the wallet address you link, if you choose to link one. Wallet activity itself is public on the blockchain and is not something we control or can remove.

To operate your account, to meet identity-verification obligations before physical redemption, and to keep records we are required to keep. We do not sell personal data and we do not use your documents for anything other than verification.

Identity documents are stored in a private bucket, not on a public URL. Access is limited to you and to compliance reviewers, enforced by database policy rather than by convention. Reviewers open documents through links that expire after five minutes.

Verification records are retained for the period required by applicable law after an account closes. Account data is deleted on request unless we are required to retain it.

We use Supabase for authentication and database hosting, and Brevo to deliver transactional email. Both process data on our instructions.

You can request a copy of your data, ask for corrections, or ask for deletion. Contact us through the support page and we will respond within the period the law requires.