Privacy Policy

Draft. This draft has not been reviewed by a lawyer yet and will change before launch.

1. What we keep. Your Telegram ID; your Telegram name if you join or run a team; whether your identity check is approved (the documents stay with our card partner); your balance, top-ups (network and transaction ID), card payments, refunds and fees; your cards' names, last 4 digits, status and limits; team memberships and limits; who invited you, if you joined with someone's link, and your referral earnings; records of decisions our staff make on your account (such as releasing a held top-up or holding referral earnings), with who made them and when; and your PIN as a salted hash, never the PIN itself.
2. What we never keep. Full card numbers, expiry dates or CVV codes. You see them only on our card partner's secure page. We never ask for your seed phrase or private keys.
3. Why we keep it. To run your account and cards, to stop fraud, to meet legal duties, and to answer you when you contact support.
4. Who else sees it. Our card partner, to verify your identity and issue cards; the blockchain network you send from, where every transaction is public; and authorities when the law requires it. Messages between you and the bot pass through Telegram, under Telegram's own privacy policy. We do not sell your data.
5. Team accounts. The team owner and admins see members' names, cards and spending on team cards.
6. How long. While your account is open, and after that for as long as the law requires financial records to be kept.
7. Your choices. To get a copy of your data or close your account, contact @crypcash_support or support@crypcash.io.
8. Waitlist. If you join the waitlist before we open, we keep only your Telegram ID, your Telegram name, the link you came from and when you joined, to tell you when you can start. It is not an account. Send /leave in the bot, or leave from the app, and we delete it.

Questions? Message @crypcash_support or write to support@crypcash.io.