Privacy policy

1. Information we collect

We collect the information you provide to us directly when you register and use the service:

• Registration data: name, email address and phone number.
• Identity data (KYC): official identity document and selfie, required for regulatory compliance.
• Usage data: IP address, browser type, pages visited and session time.
• Transaction data: amounts, recipients and date of each transaction carried out.
• Technical cookies: necessary for the operation of the platform.

2. How we use your information

We use your data exclusively to:

• Operate your account and process transfers securely.
• Verify your identity in accordance with applicable legal requirements (KYC/AML).
• Send you notifications related to your account and transactions.
• Improve our services and prevent fraud.
• Comply with legal and regulatory obligations.

We do not sell, rent or transfer your personal information to third parties for commercial purposes.

3. Cookies

We use three types of cookies. You can manage your preferences in the banner that appears when you enter the site.

4. Sharing information with third parties

We share data only with providers strictly necessary to operate the service, all under confidentiality agreements:

• Financial infrastructure providers (see section 5).
• Identity verification services (KYC).
• Technology infrastructure providers (hosting, database).
• Competent authorities where required by law.

5. Financial infrastructure — Bridge.xyz

D-ONE CASH's financial services operate on the infrastructure of Bridge.xyz. As part of the process, certain personal data (including identity and transaction data) is processed by Bridge.xyz under its own privacy policy.

6. Data security

We implement technical and organizational measures to protect your information:

• Encryption in transit using TLS 1.3.
• Encrypted storage at rest.
• Role-based restricted access — only authorized personnel access sensitive data.
• Continuous security and incident monitoring.

7. Your rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data when it is no longer necessary.
• Portability: receive your data in a structured, readable format.
• Objection: object to the processing of your data in certain cases.

To exercise any of these rights, contact us at [email protected]. We will respond within a maximum of 30 business days.

8. Data retention

We retain your personal data while your account is active and for the period required by applicable regulations (generally 5 years for financial transaction data). After this period, the data is securely deleted or anonymized.

9. Changes to this policy

We may update this policy from time to time. We will notify you by email of any significant changes, with at least 15 days' advance notice. The date of the last update will always be visible at the top of this document.

Contact

For any questions about privacy or the processing of your personal data:
[email protected]