Privacy Policy

1. Information We Collect

BCW Wallet collects only the minimum information necessary to provide our services securely and effectively. We collect the following categories of data:

• Account Information: Email address and hashed password used to create and authenticate your account.
• Identity Verification Data: Government-issued ID documents and selfie photos collected during the KYC (Know Your Customer) verification process, required by financial regulations.
• Wallet Data: Bitcoin addresses, transaction history, and balance information associated with your account.
• Device Information: Browser type, operating system, IP address, and device identifiers used for security monitoring and fraud prevention.
• Usage Data: Pages visited, features used, and interaction logs for platform improvement and debugging purposes.
• Banking Credentials: Where provided voluntarily by the user for withdrawal processing — stored with AES-256 encryption and never shared with unauthorized parties.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: To create, authenticate, and manage your BCW Wallet account.
• Transaction Processing: To process deposits, withdrawals, and transfers on your behalf.
• Identity Verification: To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations.
• Security and Fraud Prevention: To detect unauthorized access, suspicious activity, and protect user accounts.
• Customer Support: To respond to your inquiries and resolve issues with your account.
• Legal Compliance: To fulfill our obligations under applicable financial regulations and court orders.
• Platform Improvement: To analyze usage patterns and improve the performance and usability of our platform.

3. Data Storage and Security

BCW Wallet takes the security of your personal data extremely seriously. We implement the following technical and organizational measures:

• Encryption at Rest: All sensitive user data is encrypted using AES-256 encryption before storage.
• Encryption in Transit: All data transmitted between your device and our servers is protected using TLS 1.3.
• Access Controls: Only authorized personnel with a legitimate business need can access user data, subject to strict access logging and monitoring.
• Database Security: User data is stored on Supabase-managed PostgreSQL databases with row-level security policies enforced at the database level.
• Regular Audits: Our security infrastructure undergoes regular third-party penetration testing and vulnerability assessments.

4. Sharing of Information

BCW Wallet does not sell, trade, or rent your personal information to any third party. We may share your information only in the following limited circumstances:

• Service Providers: Trusted third-party vendors (e.g., cloud hosting, email delivery) who process data on our behalf under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or competent government authority.
• Safety and Fraud: When necessary to prevent fraud, protect the security of our platform, or protect the rights of our users.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity under the same privacy protections.

5. Cookies and Tracking

BCW Wallet uses minimal cookies and local browser storage to operate the platform:

• Session Storage: Used to maintain your logged-in session during use. Cleared when you sign out or close your browser.
• Local Storage: Used to remember your language preference and UI settings across sessions.
• No Third-Party Tracking: We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking cookies.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of all personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You can request a machine-readable export of your personal data.
• Right to Object: You can object to certain types of data processing, including profiling.

To exercise any of these rights, please contact us at privacy@bcwallet.com. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account Data: Retained for the duration of your account and for 5 years after account closure, as required by financial regulations.
• Transaction Records: Retained for 7 years to comply with AML regulations.
• KYC Documents: Retained for 5 years after account closure per regulatory requirements.
• Usage Logs: Retained for 12 months for security and debugging purposes, then deleted.

8. Children's Privacy

BCW Wallet is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will immediately terminate the account and delete all associated data.

If you believe a minor has registered on our platform, please contact us immediately at support@bcwallet.com.

9. Changes to This Policy

BCW Wallet reserves the right to update this Privacy Policy at any time. When we make significant changes, we will notify you by email or through a prominent notice on the platform at least 14 days before the changes take effect.

Continued use of BCW Wallet after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

For any privacy-related questions, data requests, or concerns, please contact our Data Protection Officer:

• Email: privacy@bcwallet.com
• Support: support@bcwallet.com
• Response Time: Within 2 business days