Introduction and Scope

This Privacy Policy explains how Fiatto Crypto Guide ("we," "us," or "our") collects, uses, shares, and protects personal information when you use our website at fiattocryptoguide.com, our mobile applications, and our cryptocurrency buying, selling, on-ramp, off-ramp, card, and cash-out services (collectively, the "Services").

This policy applies to all users of the Services, including visitors who browse without creating an account. It does not apply to third-party websites or services that we do not control, even if they are linked from our Services.

By using the Services, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Services.

Information We Collect

We collect information to provide the Services, comply with legal obligations, prevent fraud, and improve our offerings. The categories of information we collect include:

Information You Provide

• Identity and contact details: name, email address, phone number, date of birth, and residential address.
• Government-issued identification: passport, driver's license, or state ID, and photographs or scans you submit for identity verification.
• Financial information: bank account details, payment card numbers, and transaction history with us.
• Correspondence: messages you send to customer support or privacy inquiries.

Information Collected Automatically

• Device and usage data: IP address, device type, operating system, browser, pages visited, and actions taken within the Services.
• Cookies and similar technologies: see the "Cookies and Tracking Technologies" section below.

Information from Third Parties

• Identity verification and fraud prevention providers: we may receive verification results and risk scores.
• Blockchain analytics: when you interact with public blockchains, we may analyze on-chain data to comply with legal requirements and detect suspicious activity.
• Payment processors and banking partners: transaction confirmations and related data.

How We Use Your Information

We use personal information for the following purposes:

• Providing the Services: processing on-ramp and off-ramp transactions, issuing and managing cards, facilitating cash-outs, and maintaining your account.
• Identity verification and compliance: verifying your identity, screening against sanctions and politically exposed person lists, and meeting anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Fraud prevention and security: detecting, preventing, and responding to fraud, unauthorized transactions, and security incidents.
• Customer support: responding to your inquiries and resolving issues.
• Legal compliance: complying with applicable laws, regulations, and lawful requests from authorities.
• Service improvement: analyzing usage trends and improving the Services (using aggregated or de-identified data where possible).
• Communications: sending transactional messages (e.g., transaction confirmations, security alerts) and, where permitted, marketing communications (which you can opt out of).

We do not sell your personal information. We do not use your personal information for automated decision-making that produces legal or similarly significant effects without human review, except as necessary for fraud prevention or as required by law.

Legal Bases for Processing

If you are located in a jurisdiction that requires a legal basis for processing (such as the European Economic Area), we process personal information based on: (a) performance of a contract with you; (b) compliance with legal obligations; (c) our legitimate interests in operating and securing the Services; and (d) your consent where required.

How We Share Your Information

We share personal information only as described below:

• Service providers: companies that perform services on our behalf, such as identity verification, payment processing, cloud hosting, analytics, and customer support. They are contractually obligated to protect your information and use it only for the services they provide to us.
• Financial institutions and partners: banks, card networks, and liquidity providers necessary to execute transactions.
• Legal and regulatory authorities: when required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to comply with legal obligations, protect our rights, or prevent harm.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.
• With your consent: we may share information for other purposes with your explicit consent.

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorized access.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information, subject to legal retention requirements.
• Restriction or objection: request that we restrict or object to certain processing.
• Portability: request a machine-readable copy of the information you provided to us.
• Opt-out of marketing: unsubscribe from marketing communications using the link in the message or by contacting us.

To exercise these rights, contact us using the details in the "How to Contact Us for Privacy Inquiries" section. We will respond within the time required by applicable law. We may need to verify your identity before fulfilling a request.

California Residents (CPRA)

If you are a California resident, you have additional rights under the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CPRA. To exercise CPRA rights, contact [email protected].

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to operate the Services, remember your preferences, analyze usage, and assist with fraud prevention. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Services.

We use the following types of cookies:

• Strictly necessary: required for the Services to function (e.g., authentication, security).
• Performance and analytics: help us understand how the Services are used.
• Functionality: remember your settings and preferences.

We do not use cookies for targeted advertising on third-party sites.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. For example, we retain identity verification records and transaction data for at least five years after account closure to comply with AML and other financial regulations. When information is no longer needed, we securely delete or anonymize it.

International Transfers

We may process and store personal information in countries other than your own, including the United States. When we transfer information from other jurisdictions, we use appropriate safeguards, such as standard contractual clauses, to protect it.

Children's Privacy

The Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

Changes to This Privacy Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Services after changes become effective constitutes acceptance of the updated policy.

How to Contact Us for Privacy Inquiries

If you have questions about this Privacy Policy, wish to exercise your rights, or have a privacy-related concern, contact us:

• Privacy email: [email protected]
• Phone: +1 512-647-2083
• Mailing address: 1108 Lavaca Street, Suite 210, Austin, TX 78701

We take privacy inquiries seriously and will respond as promptly as possible.

Last Updated: October 29, 2026