Introduction and Scope

This Privacy Policy explains how Crypto Custody Guide ("we," "us," or "our") collects, uses, shares, and protects personal information when you use our website at cryptocustodyguide.com, our wallet and key management services, and our custody solutions (collectively, the "Services").

This policy applies to all users of the Services, including visitors to our website, individuals who create an account, and institutional clients who use our custody models. It does not apply to third-party websites or services that we do not control, even if they are linked from our Services.

We are based in the United States and provide Services primarily to users in the United States. If you are located outside the United States, please note that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

Information You Provide

• Account information: When you create an account, we collect your name, email address, phone number, and a password. For institutional accounts, we also collect your organization name, role, and business contact details.
• Identity verification information: To comply with anti-money laundering (AML) and know-your-customer (KYC) requirements, we collect government-issued identification numbers, date of birth, address, and, where permitted, copies of identification documents. For certain custody models, we may also collect information about your beneficial owners and control persons.
• Wallet and key information: When you use our wallet or key management services, we collect public wallet addresses and transaction records. We do not collect your private keys or seed phrases. Our custody models are designed so that we never have access to your private keys or seed phrases.
• Communications: When you contact us for support or privacy inquiries, we collect the content of your messages and any attachments.
• Payment information: For paid Services, we collect billing details and payment method information. Payment card numbers are processed by our payment processors and are not stored on our servers.

Information Collected Automatically

When you use the Services, we automatically collect certain information, including:

• Device and usage information: IP address, browser type, operating system, device identifiers, pages viewed, and actions taken within the Services.
• Cookies and similar technologies: We use cookies and similar technologies to operate the Services, remember your preferences, and analyze usage. See the "Cookies and Similar Technologies" section below for details.

Information from Third Parties

We may receive information about you from third parties, such as identity verification providers, fraud prevention services, and blockchain analytics providers. For example, we may use blockchain analytics to screen wallet addresses against sanctions lists and to detect suspicious activity, as required by law.

How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Services: To create and manage your account, facilitate wallet and key management, execute custody arrangements, and process transactions.
• Compliance and legal obligations: To verify your identity, conduct AML and KYC checks, screen transactions, and comply with applicable laws and regulations, including sanctions and tax reporting requirements.
• Security and fraud prevention: To protect the Services and our users from fraud, unauthorized access, and other security threats. This includes monitoring for suspicious activity and enforcing our terms.
• Customer support: To respond to your inquiries, provide support, and resolve disputes.
• Improving the Services: To analyze usage, troubleshoot problems, and develop new features. We may use aggregated or de-identified data for these purposes.
• Communications: To send you service-related notices, such as changes to our policies or security alerts. With your consent where required, we may also send you marketing communications about our products and services. You can opt out of marketing communications at any time.

We do not sell your personal information. We do not use your personal information for automated decision-making that produces legal or similarly significant effects without human review, except as necessary for compliance and fraud prevention.

Legal Bases for Processing (for Users in Jurisdictions Requiring Them)

If you are located in a jurisdiction that requires a legal basis for processing (such as the European Economic Area or the United Kingdom), we process your personal information on the following bases: performance of a contract (to provide the Services), compliance with legal obligations (such as AML and KYC), legitimate interests (such as security and fraud prevention), and consent (where required, such as for marketing).

How We Share Your Information

We share personal information only as described below:

• Service providers: We share information with third parties that perform services on our behalf, such as identity verification, payment processing, cloud hosting, and customer support. These providers are contractually obligated to protect your information and to use it only for the purposes for which we share it.
• Compliance and legal requests: We may disclose information to regulators, law enforcement, and other authorities when required by law or when we believe in good faith that disclosure is necessary to comply with legal process, protect our rights or property, or protect the safety of our users or the public.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your information.
• With your consent: We may share information with third parties when you direct us to do so.

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

Data Security

We take the security of your information seriously and have implemented measures designed to protect it. These measures include:

• Encryption: We encrypt data in transit using TLS and at rest using industry-standard encryption. Private keys and seed phrases are never stored on our servers; our custody models use hardware security modules (HSMs) and multi-party computation (MPC) to protect keys.
• Access controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions. We use role-based access controls and require multi-factor authentication for administrative access.
• Monitoring and testing: We regularly monitor our systems for vulnerabilities and conduct periodic security assessments.
• Incident response: We maintain an incident response plan and will notify you and applicable authorities of a data breach as required by law.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for keeping your account credentials confidential.

Your Rights

Depending on your location, you may have certain rights regarding your personal information. These may include:

• Access: The right to request a copy of the personal information we hold about you.
• Correction: The right to request that we correct inaccurate or incomplete information.
• Deletion: The right to request that we delete your personal information, subject to certain exceptions (such as legal retention requirements).
• Restriction or objection: The right to request that we restrict or object to certain processing.
• Portability: The right to receive your information in a portable format.
• Opt-out of marketing: You can opt out of marketing communications at any time by following the instructions in the communication or by contacting us.

To exercise these rights, please contact us using the details in the "How to Contact Us for Privacy Inquiries" section below. We will respond to your request within the time required by applicable law. We may need to verify your identity before fulfilling your request.

California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These include the right to know what personal information we collect, use, and disclose; the right to delete; the right to correct; the right to opt out of the sale or sharing of personal information; and the right to limit the use of sensitive personal information. We do not sell or share your personal information as those terms are defined by the CPRA. To exercise CPRA rights, contact privacy@cryptocustodyguide.com. You may also designate an authorized agent to make a request on your behalf.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the Services, remember your preferences, and analyze usage. Cookies are small text files stored on your device. We use the following types of cookies:

• Strictly necessary cookies: Required for the Services to function, such as authentication and security cookies.
• Preference cookies: Remember your settings and preferences.
• Analytics cookies: Help us understand how the Services are used so we can improve them.

You can control cookies through your browser settings. If you disable cookies, some features of the Services may not function properly. We do not currently respond to "Do Not Track" signals.

Third-Party Services

We use third-party services to support the Services, including:

• Identity verification and fraud prevention: To verify your identity and screen for fraud.
• Blockchain analytics: To screen wallet addresses and transactions for compliance and security purposes.
• Cloud hosting: To store and process data securely.
• Payment processing: To process payments for paid Services.

These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third parties.

International Data Transfers

We are based in the United States and process information in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. We take steps to ensure that transfers comply with applicable law, such as by using standard contractual clauses where required.

Data Retention

We retain personal information for as long as necessary to provide the Services and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected. For example, we retain identity verification records for at least five years after your account is closed, as required by AML regulations. When information is no longer needed, we securely delete or anonymize it.

Children's Privacy

The Services are not intended for children under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Services before the changes take effect. We encourage you to review this policy periodically. The "Last Updated" date at the top of this policy indicates when it was last revised.

How to Contact Us for Privacy Inquiries

If you have questions or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, please contact us:

• Privacy email: privacy@cryptocustodyguide.com
• Phone: +1 (415) 555-0142
• Mailing address: Suite 340, 2170 Sutter Street, San Francisco, CA 94115

We will respond to your inquiry as soon as possible and within the time required by applicable law.

Last Updated

This Privacy Policy was last updated on October 29, 2026.