Privacy Policy

This Policy applies to information collected:

• On this website and on other Company-controlled sites that link to this Policy.
• Through email, text, or other electronic communications between you and us.
• Through the merchant portal, hosted checkout, and related Services we provide to you.

It does not apply to information collected offline, on sites that do not link to this Policy, or by third parties accessible from our Services — including public blockchain networks, which are outside our control.

By accessing or using our website or Services, you agree to this Policy. If you do not agree, you should not use them.

Because the Services are non-custodial, there are categories of information we deliberately do not hold:

• We never receive your wallet passcode, and we do not hold your keys in any usable form. Key material is encrypted on your device before it reaches us; we store that ciphertext so you can restore a wallet, and we cannot decrypt it.
• We do not hold your Digital Assets and therefore hold no balance or custody record on your behalf.
• We cannot recover your wallet, and no request to us — however verified — can produce your keys.

Our Services are not directed to children under eighteen (18), and no one under that age may provide information through them. We do not knowingly collect personal information from children under 18, and will delete it if we learn we have. If you believe we may hold information about a child under 18, contact support@numerari.io.

• Identifiers: name, business name, address, email, phone number, and billing details.
• Commercial information: subscription and transaction records between you and the Company.
• Payment-related information: wallet addresses you add, contact records you create, payout metadata such as amounts, networks, timestamps, and transaction hashes.
• Technical information: IP address, browser type, operating system, device and connection data.
• Online activity: browsing behaviour and interactions with our website and Services.
• Information you voluntarily provide: through forms, support correspondence, and surveys.

We collect information directly from you, automatically as you use the Services, and from third parties such as business partners and service providers.

Invoice recipients: when a business uses Numerari to invoice its customers, that business provides us the customer’s name, email address, and, if the customer agreed to receive texts, mobile phone number, so that we can deliver the invoice and payment link. See Section 14 for text messaging.

When you transact, information is written to a public blockchain by design. Wallet addresses, amounts, token types, timestamps, and transaction hashes are visible to anyone and are permanent.

• This data is not stored by us in the sense that we control it — it exists on a decentralised network we do not operate.
• We cannot edit, delete, anonymise, or retract it, and neither can you. A deletion request cannot reach it.
• Blockchain addresses can, in some circumstances, be linked to individuals through analysis performed by third parties. Consider this before publishing an address or associating it with your identity.

This website does not set cookies, and there is no cookie banner because there is nothing to consent to. We measure how the site performs using one analytics provider. Nothing it stores in your browser outlives your browser tab — but the individual analytics events sent while you are on the site are still retained by our analytics provider under its own data retention policy, the same as any analytics platform retains the events it receives.

• PostHog (PostHog Inc., United States) is our analytics provider. It records page views and clicks. It is configured with in-memory storage only: no cookie is set, nothing is written to local storage, and no identifier is kept that would let us recognise you on a later visit or on any other website.
• Session storage holds the campaign tag from the link you arrived through (if any), your landing page, and the page that referred you, for the length of that tab only, so that a visit is still attributable after you navigate between pages. It is cleared when you close the tab.
• The web address of the page you're on is sent with each page-view and click event, with the query string removed before it is sent — so a link containing a password-reset token, an email address, or an advertising click id never reaches our analytics provider, even automatically.

We do not use advertising pixels, cross-site tracking tools, or behavioural advertising networks on this website. We do not sell or share personal information as those terms are defined under United States state privacy laws.

We honour the Global Privacy Control signal. If your browser or extension sends GPC, this website loads no analytics at all and writes nothing to your device.

• To provide, maintain, secure, and improve the Services.
• To manage accounts, authenticate you, and provide support.
• To process subscriptions, billing, and fees.
• To operate address-confirmation features, including micro-deposits and signed challenges.
• To meet legal, regulatory, sanctions-screening, and record-keeping obligations.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To notify you of updates or policy changes, and to deliver relevant communications.
• For any other purpose disclosed at collection or with your consent.

We may disclose aggregated, non-identifiable information without restriction. We may disclose personal information:

• To divisions, affiliates, and contractors who support our business, including payment, email, analytics, and infrastructure providers.
• To a buyer or successor in the event of a merger, divestiture, or sale of assets.
• To fulfil the purpose for which you provided it, or with your consent.
• To comply with legal obligations, court orders, or governmental requests.
• To enforce our rights and agreements, including billing and collection.
• To protect the Company, our customers, or others from fraud, security threats, or harm.

We do not sell your personal information.

• Marketing: you may opt out of promotional email by using the unsubscribe link or contacting support@numerari.io.
• Global Privacy Control: if your browser or a browser extension sends the GPC signal, this website loads no analytics and writes nothing to your device. No further action is needed from you.
• Analytics: this website sets no cookies and keeps no identifier that survives closing your tab, so we cannot recognise you on a later visit. Closing the tab does not retroactively delete analytics events already sent while you were on the site — those are retained by our analytics provider under its own data retention policy, the same as any analytics platform.

You may request access to, correction of, or deletion of personal information by emailing support@numerari.io. We may be unable to delete certain information except by also closing your Account, and may deny a request where the law requires us to retain records. As set out in Section 5, information already written to a public blockchain cannot be deleted by us.

Residents of certain states — including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia — have rights such as confirming whether we process personal information; accessing, correcting, or deleting it; data portability; opting out of processing for targeted advertising, sale, or profiling with significant effects; and limiting the processing of sensitive personal data.

California residents have additional rights under the CCPA/CPRA, including disclosure, deletion, correction, and opt-out of data sales, and under California’s “Shine the Light” law. Nevada residents may submit opt-out requests under NRS Chapter 603A. We do not currently sell data in a way that triggers Nevada’s opt-out requirement.

We implement security measures including encryption, access controls, and monitoring. No method of transmission over the Internet is completely secure, and any transmission is at your own risk.

You are responsible for safeguarding your Account credentials and your wallet passcode. We cannot reset a wallet passcode, and losing it means losing access to that wallet permanently.

We may update this Policy to reflect changes in our practices or in applicable law. Updates will be posted with a revised Last Modified date, and significant changes may also be communicated by email or in-service notification. Continued use after an update constitutes acceptance.

When a business that uses Numerari sends you an invoice by text message, we process your mobile phone number, the content of the message, and delivery information (such as whether the message was delivered) in order to send the message and show that business its delivery status.

• Consent: you receive invoice text messages only after you give your mobile number to the business invoicing you and agree to receive texts about your invoices.
• No sharing for marketing: notwithstanding Section 8, mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers (such as our text message delivery provider) that send the messages on our behalf.
• Opting out: reply STOP to any message to stop receiving texts. Reply HELP for help, or contact support@numerari.io.
• Retention: we keep a masked form of your phone number (for example, +1******4567) and delivery records with the invoice, for as long as the business’s account and our legal obligations require.