Privacy Policy
Last updated: August 14, 2026
This Privacy Policy explains how Kaloq ("Kaloq," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information when you visit our website, communicate with us, or use a Kaloq product or service that links to this Policy. The Kaloq entity that contracts with you is responsible for the processing described here. Some account, card, payment, digital-asset, identity-verification, or banking services are provided by regulated or other third-party partners. Those partners may process personal information as independent controllers under their own privacy notices, which also apply to their services.
1. Scope and Our Role
This Policy applies to Kaloq-controlled websites, applications, communications, and services that link to it. It does not govern a third party's website, wallet, blockchain protocol, or service simply because it connects to Kaloq. Where a partner provides an account, card, payment, custody, conversion, or identity-verification service, Kaloq and that partner may each determine how certain information is processed for their respective purposes. If a service-specific notice conflicts with this Policy, the more specific notice controls for that service.
2. Information We Collect
Depending on how you interact with Kaloq, we may collect: identity and eligibility information, such as name, date of birth, nationality, government identification, photograph, address, tax information, occupation, and source-of-funds or source-of-wealth information; contact and profile information, such as email, phone number, company, account credentials, preferences, and communications; financial and transaction information, such as bank or card details, balances, deposits, withdrawals, conversions, merchant and payment details, transaction history, and related counterparties; digital-asset information, such as wallet addresses, network, asset, transaction hash, and on-chain activity; device, usage, and technical information, such as IP address, device and browser details, approximate location derived from IP, log data, security events, and interactions with our services; and information you provide in support requests, applications, surveys, promotions, or contact forms.
3. Sources of Information
We collect information from you; automatically from your device and use of our services; from Kaloq affiliates; and from service providers and partners such as financial institutions, card-program partners, payment networks, identity-verification vendors, compliance and fraud-prevention providers, blockchain analytics providers, wallet or digital-asset service providers, and customer-support vendors. We may also obtain information from public blockchains, sanctions and watchlists, public records, commercially available databases, counterparties, and other sources permitted by law. Information received from a partner may include application or verification results, account status, transaction information, and risk indicators.
4. How We Use Information
We may use personal information to provide, operate, administer, maintain, and support our services; verify identity and eligibility; establish and manage accounts; process and reconcile transactions; communicate with you; personalize your experience; provide customer support; detect, investigate, and prevent fraud, money laundering, sanctions evasion, security incidents, prohibited activity, and other misuse; comply with legal, regulatory, audit, reporting, and recordkeeping obligations; enforce agreements and protect the rights, property, and safety of Kaloq, our users, partners, and others; debug, analyze, research, develop, and improve our services; create aggregated or de-identified information; market Kaloq where permitted and manage your preferences; and evaluate or carry out a financing, reorganization, acquisition, sale, or other corporate transaction.
5. Legal Bases for Processing
Where applicable law requires a legal basis, we process personal information as necessary to perform a contract with you or take steps at your request; comply with legal obligations; pursue legitimate interests such as operating and improving our services, preventing fraud, securing our systems, communicating with users, and protecting legal rights, provided those interests are not overridden by your rights; and with consent where we request it. You may withdraw consent at any time, but withdrawal does not affect processing already undertaken and may prevent us from providing features that depend on that consent.
6. How We Disclose Information
We may disclose personal information to Kaloq affiliates; banks, card issuers or program managers, payment networks and processors, digital-asset and wallet service providers, liquidity or conversion providers, identity-verification and blockchain analytics providers, and other partners needed to provide or support a requested service; vendors that host, secure, analyze, communicate, or provide professional services for our business; recipients, counterparties, or other persons you direct us to interact with; regulators, courts, law enforcement, tax authorities, and other persons when we believe disclosure is required or appropriate to comply with law, enforce agreements, investigate misuse, respond to claims, or protect rights and safety; and actual or prospective parties and advisers involved in a merger, financing, restructuring, asset transfer, insolvency, or similar transaction. We may also disclose information with your consent or at your direction, and disclose aggregated or de-identified information where permitted by law.
7. Sale, Advertising, and Sensitive Information
We do not sell personal information for money, and we do not currently share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws. If this changes, we will provide any notice and opt-out mechanism required by law before engaging in that activity. We use sensitive personal information, including identity, account-access, financial, precise-location if enabled, and government-identification information, only for permitted purposes such as providing requested services, verifying users, processing transactions, preventing fraud, maintaining security, and meeting legal obligations, unless we provide additional notice and choice.
8. Public Blockchains
Transactions recorded on a public blockchain are visible to others and generally cannot be altered or deleted by Kaloq. Wallet addresses and transaction details may remain publicly accessible indefinitely and may allow activity to be linked across transactions or, in some circumstances, to an individual. Kaloq may review, attribute, or retain on-chain information for transaction processing, compliance, fraud prevention, security, analytics, and dispute resolution. Requests to delete or correct information do not extend to records that Kaloq does not control, including immutable blockchain data.
9. Cookies and Similar Technologies
Our website may collect ordinary server and security logs and uses browser local storage to remember your language preference. We may use cookies or similar technologies that are strictly necessary to operate and secure our services. If we introduce non-essential analytics or advertising technologies, we will provide notice and choices where required by law. Your browser or device may allow you to limit storage, but doing so can affect service functionality. Where legally required, we honor recognized browser-based opt-out signals for the processing to which they apply.
10. Retention
We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including while you maintain an account or business relationship with us, and afterward as needed to satisfy anti-money-laundering, sanctions, tax, accounting, regulatory, audit, dispute-resolution, security, and other legal or partner requirements. Retention periods vary by the type of information, the services involved, the sensitivity and risk of the information, applicable limitation periods, and whether an investigation, claim, legal hold, or enforcement matter is pending. We may retain aggregated or de-identified information where permitted by law and may keep information in backups until it is deleted through ordinary backup cycles.
11. International Transfers
Kaloq, its affiliates, partners, and service providers may process personal information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or approved contractual protections. You may contact us for more information about applicable transfer safeguards.
12. Security
We use administrative, technical, and organizational measures designed to protect personal information in light of its nature and the risks involved. No system, transmission method, wallet, blockchain, or storage environment is completely secure, however, and we cannot guarantee absolute security. You are responsible for protecting your credentials, devices, wallets, and recovery information, and for promptly notifying us if you suspect unauthorized access or activity.
13. Automated Tools and Risk Decisions
We and our partners may use automated tools to support identity verification, sanctions screening, fraud detection, transaction monitoring, security, eligibility, and risk review. These tools may flag, delay, limit, or refer an application or transaction for review. Where applicable law grants rights concerning a decision based solely on automated processing that has legal or similarly significant effects, we will provide the required information and a way to request human review or contest the decision, subject to legal, security, and anti-fraud limitations.
14. Your Privacy Rights and Choices
Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or portability of personal information; restrict or object to certain processing; withdraw consent; opt out of certain sales, sharing, targeted advertising, or profiling; appeal a declined request; and receive equal service without unlawful discrimination for exercising a privacy right. You may also opt out of marketing emails through the unsubscribe method provided in the message. We may verify your identity and authority before acting on a request, ask for information reasonably needed to process it, and retain a record of the request. Authorized agents may submit requests where allowed by law, subject to verification. These rights do not override lawful exemptions, including obligations to retain information, protect security, prevent fraud, complete transactions, or establish and defend legal claims. You may complain to the data-protection authority where you live or work if applicable.
15. Children
Kaloq services are not directed to anyone under 18, and we do not knowingly collect personal information from children through services covered by this Policy. If you believe a child has provided personal information to us, contact us so that we can review and take appropriate action.
16. Changes to This Policy
We may update this Policy to reflect changes in our services, partners, technology, or legal obligations. We will post the updated version and revise the date above. If required by law, we will provide additional notice or obtain consent before a material change takes effect. Your continued use of the services after an update is subject to the updated Policy, except where applicable law requires a different form of acceptance.
17. Contact Us
To ask a privacy question or exercise a privacy right, email operations@kaloq.com. Please write "Privacy Request" in the subject line and identify the Kaloq service involved. The relevant Kaloq entity and, where applicable, its address or representative are identified in the terms or account materials for your service. We may direct a request to the responsible partner when that partner controls the relevant information.