Privacy Policy

Information you provide to us: account information such as your name, email address, phone number, and date of birth; identity verification (KYC) information such as government-issued ID documents, photographs, proof of address, and other information required to verify your identity and comply with applicable law; and communications you send to our support channels.

Information collected automatically: device and usage data such as IP address, device type, operating system, app version, log data, and approximate location derived from IP address; and transaction data such as deposits, transfers, card transactions, wallet addresses, amounts, and timestamps. Transactions on public blockchains are, by design, publicly visible.

Information from third parties: results of identity verification, sanctions, and fraud screening performed by our verification providers, and information from our partners in connection with services they provide to you.

We use your information to provide and operate the Services; create and manage your account; verify your identity and comply with anti-money-laundering (AML), counter-terrorist-financing (CTF), sanctions, and other legal obligations; process transactions and card payments; prevent fraud and abuse; provide customer support; improve the Services; and send you service-related communications.

We do not sell your personal information.

Where applicable law requires a legal basis, we process your information to perform our contract with you; to comply with legal obligations (including AML/KYC laws); for our legitimate interests, such as securing and improving the Services; and with your consent, where required.

We share information only as needed to operate the Services:

Service providers and partners, including our wallet infrastructure provider (Privy Inc., a Stripe company), identity verification provider (Sumsub), card issuing and settlement partners, and cloud hosting and analytics providers. These parties process data under contractual confidentiality and data-protection obligations.

Legal and regulatory authorities, where required by law, regulation, or legal process, or to protect our rights, our users, or the public.

Corporate transactions, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We operate internationally. Your information may be transferred to and processed in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards for such transfers.

We retain personal information for as long as your account is active and as required to comply with legal obligations. Identity verification and transaction records are retained for at least five years after account closure, as required by applicable AML regulations, after which they are securely deleted or anonymized.

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls, and secure key-management infrastructure. No system is completely secure; please protect your account credentials and enable available security features.

Depending on your jurisdiction, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below. We may be legally required to retain certain information (for example, KYC records) even after a deletion request.

The Services are not directed to persons under 18, and we do not knowingly collect information from them.

We may update this Policy from time to time. We will post the updated version on this page with a revised "Last updated" date and, for material changes, notify you through the Services.

NUKUD FINANCIAL LLC
25 SE 2nd Ave, Ste 550
Miami, FL 33131, United States
Email: privacy@nukud.com