Privacy Policy

The Platform acts as a limited data processor and interface. For all financial services (KYC/KYB verification, payment processing, account management), Bridge acts as the data controller. Personal data collected for identity verification is transmitted to and processed by Bridge in accordance with Bridge's own privacy policy.

The Platform does not make autonomous decisions about your personal data as it relates to financial services. All such decisions are made by Bridge.

The Platform stores only the following minimal data necessary for platform operation:

• Reference IDs — Bridge customer ID, Bridge account ID, Bridge wallet ID (used to fetch data from Bridge on demand)
• Last 4 digits — last 4 characters of account numbers / IBANs, for display in account lists without exposing full sensitive details
• Basic profile — name, email, country, phone, account type (individual/business)
• Platform preferences — language, theme, notification settings, conversion preferences
• Security credentials — 2FA secret hashes (SHA-256), session data
• Traffic attribution — UTM parameters captured at first visit
• Usage analytics — page views, feature interactions

The Platform does NOT store: full account numbers, routing numbers, IBANs, SWIFT/BIC codes, account holder names, bank addresses, beneficiary addresses, tax IDs, registration numbers, or beneficial owner information. These are fetched in real-time from Bridge API only when you explicitly request to view them, and require 2FA verification. The fetched data is displayed temporarily and never persisted in any database or log.

Identity verification documents (government IDs, passports, biometric data, proof-of-address documents) are NEVER received, viewed, stored, copied, or processed by the Platform. They are submitted by the user directly to Bridge or its verification partners (e.g., Persona) via the Bridge-hosted verification page. Financial information and transaction data are processed and stored exclusively by Bridge under its own data retention policies.

When you use the Platform, the following data is transmitted to Bridge to enable service provision:

• Full name, email, and contact details — needed to create a Bridge customer record
• Wallet addresses for fund transfers (entered by the user, not from Bridge)
• Conversion and payment instructions initiated by the user

Business information (legal name, registration number, tax ID, beneficial owners, registered address) is collected directly by Bridge during the KYB verification process on Bridge-hosted pages. The Platform does not collect, transmit, or store this data — it is accessed on-demand from Bridge only when an admin views it in the admin panel (with 2FA verification).

Bridge processes this data under its own privacy policy and applicable financial regulations. The Platform has no control over how Bridge stores, uses, or shares this data. IMPORTANT: KYC/KYB verification documents (passports, IDs, biometric data, proof of address) are NEVER transmitted through or stored on the Platform's systems. When verification is required, the user is redirected to a Bridge-hosted page and submits all documents directly to Bridge or its verification partners. The Platform never sees, receives, or processes any verification documents at any time.

The Platform implements industry-standard security measures including encrypted connections (TLS), two-factor authentication, and session management. However, the Platform cannot guarantee absolute security of data transmitted to Bridge or third-party services.

Security of funds, financial data, and identity verification documents held by Bridge is Bridge's sole responsibility.

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. For Platform-level data, contact us through the in-app Support page.

For data held by Bridge (identity verification, transaction history, financial records), you must exercise your rights directly with Bridge, as the Platform cannot access or modify Bridge-held data.

We use cookies and similar technologies to operate the Platform and, with your consent, to analyze traffic and improve user experience. When you visit the Platform for the first time, a cookie consent banner appears allowing you to accept, reject, or customize your cookie preferences.

Cookie categories:

• Necessary cookies — required for authentication, session management, and core platform functionality. These are always active and cannot be disabled.
• Analytics cookies — Google Analytics (GA4) cookies that collect anonymized data about page views, sessions, traffic sources, and device information. These are only loaded after you give consent.

No advertising cookies. The Platform does not use advertising or third-party tracking cookies.

Third-party processor: Analytics data is processed by Google LLC under Google's data processing terms. IP addresses are anonymized (anonymize_ip enabled). You can review Google's privacy policy at policies.google.com/privacy.

Withdrawing consent: You can withdraw your consent at any time by clearing your browser's local storage for this site, which will reset the consent banner on your next visit.

Consent retention: Your consent preference is stored locally in your browser for 365 days, after which the consent banner will reappear.

Platform-level data (preferences, analytics) is retained for the duration of your account plus a limited period for security and audit purposes. Data retained by Bridge follows Bridge's own retention schedule and regulatory requirements, over which the Platform has no control.

The Platform integrates with Bridge and may display information from blockchain networks. Each third-party service has its own privacy practices. The Platform is not responsible for the privacy practices of Bridge, blockchain networks, or any other third-party service.

We may update this Privacy Policy from time to time. Changes are effective upon posting. We encourage you to review this page periodically.