01What we collect
- Account data — name, email, verification documents
- Transaction data — card authorizations, top-ups, burns
- Technical data — device, IP address, session logs
- Payment proof you submit at checkout (amount, TX hash, screenshot)
02How we use it
We use your data to run the service: issuing cards, verifying identity, preventing fraud, matching crypto payments on-chain, and meeting legal obligations. That's it.
03What we never do
- We never sell your data
- We never run advertising or share data with ad networks
- We never share your spending history with merchants
- We never store card numbers outside our encrypted vault
04Storage & security
Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Card data lives in hardware security modules. Access is role-restricted and logged. Two-factor authentication is mandatory on every account.
05When we share
We share data only with: our card-issuing and banking partners (to operate the service), verification providers (KYC), and regulators or law enforcement when legally compelled. Each partner is bound by contract to protect it.
06Retention
Account and transaction records are kept for 5 years after account closure, as financial regulations require. Payment-proof screenshots are deleted within 90 days of verification.
07Your rights
You can request a copy of your data, correct it, or ask for deletion (where the law lets us) by emailing privacy@veilblack.com. We respond within 30 days.