Privacy Policy

Effective Date: October 10, 2025Last Updated: October 10, 2025

1. Introduction

Welcome to XENTWAVE ("we," "our," "us," or "Company"). XENTWAVE is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, and access our crypto banking services, including bill payments, virtual cards, multi-chain swaps, and gift card purchases.

By accessing or using XENTWAVE services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

  • Register for an account or join our waitlist
  • Complete verification procedures (KYC/AML compliance)
  • Use our services (payments, swaps, card transactions)
  • Contact customer support
  • Subscribe to newsletters or marketing communications
  • Participate in surveys or promotional activities
CategoryData TypesPurpose
Identity InformationFull name, date of birth, nationality, government-issued IDAccount creation, identity verification, regulatory compliance
Contact InformationEmail address, phone number, postal addressCommunication, service delivery, support
Financial InformationBank account details, cryptocurrency wallet addresses, transaction historyProcessing payments, virtual card issuance, swaps
Verification DocumentsGovernment ID, proof of address, selfie photosKYC/AML compliance, fraud prevention

2.2 Information Collected Automatically

When you access our services, we automatically collect certain information including device information, usage data, location data, technical data, and cookie data.

2.3 Blockchain and Cryptocurrency Data

As a crypto banking platform, we collect and process wallet addresses, transaction hashes, digital asset balances, smart contract interactions, gas fees, and multi-chain swap history.

3. How We Use Your Information

We use your personal information for account creation and management, processing transactions, issuing virtual cards, multi-chain swaps, bill payments, gift card purchases, regulatory compliance (KYC/AML), fraud prevention and security, customer support, service improvement, and marketing communications (with consent).

4. How We Share Your Information

We share your information with trusted third-party service providers including KYC/AML verification services, payment processors, blockchain infrastructure providers, cloud hosting providers, analytics providers, customer support tools, marketing platforms, and security services.

We may also disclose your information when required by law to law enforcement agencies, regulatory authorities, courts, government agencies, and legal counsel.

5. Data Security

We implement industry-standard security measures to protect your information including:

  • Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
  • Access Controls: Role-based access, multi-factor authentication, principle of least privilege
  • Network Security: Firewalls, intrusion detection systems, DDoS protection
  • Wallet Security: Multi-signature wallets, cold storage for majority of crypto assets
  • Monitoring: 24/7 security monitoring, automated threat detection

6. Data Retention

We retain your personal information for different periods depending on the type of data:

  • Account Information: Duration of account + 7 years
  • Transaction Records: 10 years after transaction
  • KYC/AML Documents: 7 years after account closure
  • Support Communications: 5 years
  • Marketing Data: Until consent withdrawal or 3 years of inactivity

7. Your Privacy Rights

Depending on your location, you may have the following rights:

Rights Under GDPR (European Users)

  • Right to Access: Obtain confirmation and copies of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Data Portability: Receive your data in machine-readable format
  • Right to Object: Object to processing based on legitimate interests

Rights Under CCPA (California Users)

  • Right to Know: What personal information we collect, use, and disclose
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
  • Right to Non-Discrimination: Equal service regardless of exercising privacy rights

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings or our cookie preference center.

9. Children's Privacy

XENTWAVE services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will delete it immediately.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal or regulatory requirements, new features or services, or user feedback. We will notify you of any material changes via email or prominent notice on our website.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

XENTWAVE Privacy Team

Response Time: We aim to respond to all inquiries within 5 business days.

By using XENTWAVE services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.