Privacy Policy

Draft. Not yet reviewed by counsel — do not treat this page as final before general launch.

What we store

Your certificate's public core — wallet address, tier, issuance time, and any KYC/AML status — is stored and published on its certificate page. Your email address (received from Stripe at checkout) and payment details are stored separately and are never included in the signed certificate core or shown on any public page.

Identity verification data

Where Sumsub identity verification is used, documents and biometric data you submit are held by Sumsub under their own privacy terms; we receive only the review outcome (verified/rejected) and a timestamp.

AML screening data

Where wallet AML screening (Nominis) is used, we submit the wallet address for screening and store the resulting status on the certificate.

Embedded wallet creation

If you choose "Create a wallet with email" instead of connecting an existing wallet, your email address is sent to Privy solely to authenticate you and create a non-custodial embedded wallet — Privy never gives us or anyone else access to the wallet's private key. This applies at every tier, not only where identity verification is used.

Third parties

We use Stripe for payment processing, Privy for embedded wallet creation (where chosen), Sumsub for identity verification (where enabled), and Nominis for AML wallet screening (where enabled). Cloudflare hosts the site and its data store.

Contact

For data requests, contact Karl Finance Technologies Ltd.