Legal & Compliance

Privacy Policy

Draft for Review • Effective Date: [TO BE DETERMINED UPON LAUNCH] • Last Revised: October 2026

Notice to Reviewers: This document is a foundational starter policy prepared for architectural review. Specific legal entity designations, registered company numbers, supervisory data authority references, and jurisdictional counsel review must be inserted prior to production deployment.

1. Overview and Scope

This Privacy Policy describes the policies and practices of Trust Back ("we", "us", or "our") regarding the collection, storage, use, and disclosure of personal information when you access our website, software platform, and digital wallet services.

By creating an account or using our platform, you acknowledge the collection and processing of your information in accordance with this policy.

2. Information We Collect

We collect information you provide directly to us, including:

Account Identification: Legal full name, email address, password hash, and assigned account number.
Identity Verification Details (KYC): Government-issued identification credentials, residential address documentation, and date of birth when submitted for limit upgrades.
Financial & Transaction Ledger Data: Deposit references, withdrawal destination account numbers, internal transfer records, and transaction timestamps.
Technical Access Logs: IP address, device type, browser identifiers, and session interaction timestamps.

3. How We Use Your Information

Your information is processed strictly for the following operational purposes:

To provide, maintain, and secure your digital wallet account and balance records.
To authenticate sessions and process authorized transfer and withdrawal requests.
To fulfill regulatory obligations regarding identity verification and anti-money laundering (AML).
To detect, investigate, and prevent fraudulent activity or unauthorized platform access.
To provide responsive technical assistance through our support desk.

4. Information Sharing and Disclosure

Trust Back does not sell, rent, or trade your personal information to third-party advertisers. We may disclose data only under the following strictly defined conditions:

Operational Service Providers: Verified infrastructure hosts, secure email transmission services, and payment processing partners strictly under data protection agreements.
Legal & Regulatory Obligations: When required by enforceable court order, subpoena, or applicable statutory law.
Security Protection: When disclosure is necessary to investigate severe security vulnerabilities or protect customer funds from imminent fraudulent attack.

5. Data Retention and Security Safeguards

We retain personal data only for as long as your account remains active or as required by financial ledger retention statutes. All sensitive data is secured using encrypted transport protocols (HTTPS/TLS) and salted cryptographic hashes.

6. User Rights and Data Control

Depending on your jurisdiction, you may have statutory rights regarding your personal information, including:

The right to request a copy of the personal data we hold about you.
The right to rectify inaccurate or outdated account records.
The right to request account closure and data deletion, subject to mandatory accounting retention laws.
The right to adjust your nonessential cookie and analytics preferences.

7. Company Information & Data Protection Contact

[COMPANY LEGAL ENTITY NAME: To be completed by corporate legal counsel]
[REGISTERED COMPANY ADDRESS: To be completed prior to publication]
Data Protection Inquiries: Contact Support Desk