Privacy Policy

This Privacy Policy describes how Qrypt Inc. ("Qrypt," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our website (qryptpay.com), Dashboard, APIs, and related services (collectively, the "Services").

By using the Services, you consent to the practices described in this policy. If you do not agree, please do not use the Services.

Last updated: February 2026

Information you provide directly:

• Account information — Name, email address, phone number, business name, business address, and industry when you register for an account or join the waitlist
• Identity verification — Documents and data required for KYB (Know Your Business) verification, including legal entity details and authorized representative information
• Financial information — Bank account details (routing number, account number) for settlement payouts
• Transaction data — Payment amounts, blockchain transaction hashes, token types, wallet addresses, and settlement records
• Communications — Messages you send to our support team, feedback, and survey responses

Information collected automatically:

• Device and usage data — IP address, browser type, operating system, device identifiers, pages viewed, and actions taken within the Dashboard
• Log data — Server logs including access times, referring URLs, and API request metadata
• Location data — Approximate geographic location derived from your IP address

Information from third parties:

• Identity verification providers used during the KYB process
• Banking partners that facilitate settlements
• Blockchain networks (publicly available transaction data)

We use the information we collect to:

• Provide, operate, and maintain the Services, including processing payments and settlements
• Verify your identity and complete the KYB onboarding process
• Communicate with you about your account, transactions, and service updates
• Detect, investigate, and prevent fraud, unauthorized access, and other illegal activity
• Comply with legal obligations, including AML/CTF regulations, tax reporting, and law enforcement requests
• Improve and develop the Services through aggregated analytics and usage patterns
• Send you marketing communications about Qrypt products and updates (you can opt out at any time)
• Provide customer support and respond to your inquiries

We do not sell your personal information. We may share your information with the following categories of recipients:

• Banking and payment partners — To process settlements and facilitate bank transfers to your account
• Identity verification providers — To complete KYB checks during onboarding
• Service providers — Including hosting (Vercel), database (Neon), email (Resend), analytics, and security service providers that help us operate the Services
• Legal and regulatory authorities — When required by law, subpoena, court order, or regulatory request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business transfers — In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
• With your consent — When you explicitly authorize us to share your information

All third-party service providers are contractually required to protect your information and use it only for the purposes we specify.

Your data is stored on servers located in the United States. If you access the Services from outside the US, your information will be transferred to and processed in the US.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Tokenized storage of sensitive financial data — we do not store raw bank account numbers
• Role-based access controls for internal systems
• Regular security audits and monitoring

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide the Services. After account closure, we may retain certain information as required by law (e.g., tax records, transaction history for AML/CTF compliance) or as necessary to resolve disputes, enforce our agreements, and comply with legal obligations.

Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes.

We use cookies and similar technologies to operate and improve the Services:

• Essential cookies — Required for basic functionality such as authentication and session management
• Analytics cookies — Help us understand how visitors use the site so we can improve the experience

You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Services.

We do not currently respond to "Do Not Track" browser signals.

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Deletion — Request deletion of your personal information, subject to legal retention requirements
• Portability — Request your data in a structured, machine-readable format
• Opt-out of marketing — Unsubscribe from promotional emails at any time using the link in any marketing email or by contacting us

To exercise any of these rights, contact us at support@qryptpay.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to know — You can request details about the categories and specific pieces of personal information we have collected
• Right to delete — You can request deletion of your personal information, subject to certain exceptions
• Right to opt out of sale — We do not sell personal information
• Right to non-discrimination — We will not discriminate against you for exercising your privacy rights

To submit a request, email support@qryptpay.com with "California Privacy Request" in the subject line.

The Services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately and terminate the associated account.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 15 days before taking effect. The "Last updated" date at the top of this policy reflects the most recent revision.

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

• Email — support@qryptpay.com
• Twitter/X — @qryptpay