Privacy Policy

1. Introduction

Assets Bridge ("the Platform", "we", "us", "our") is committed to protecting the personal information of all users. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you access or use the Assets Bridge platform.

By registering and using Assets Bridge, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the platform.

2. Information We Collect

2.1 Information You Provide Directly

When you register or use the platform, we collect:

• Full name and email address (required for account creation and verification).
• Password (stored in encrypted form; we do not have access to your plain-text password).
• Mobile Money wallet details (phone number and network) for deposit and withdrawal processing.
• Cryptocurrency wallet addresses for crypto transactions.
• Transaction data: deposits, withdrawals, investment selections, and referral activity.

2.2 Information Collected Automatically

When you access the platform, certain technical information may be collected automatically, including:

• IP address and device type.
• Browser type and version.
• Pages visited and session activity.
• Login timestamps and error logs generated during platform use.

2.3 Information from Third Parties

If you sign in using Google, we receive your name and email address as permitted by your Google account settings. We do not receive or store your Google password. Payment status data may be received from Korapay upon processing your deposits.

3. How We Use Your Information

• Account creation, verification, and management.
• Processing deposits, withdrawals, investment purchases, and referral commissions.
• Sending transactional email notifications (registration, deposits, withdrawals, profit credits, referral commissions).
• Administrative review and approval of financial transactions.
• Generating internal financial reports and analytics.
• Detecting and preventing fraud, unauthorised access, and platform abuse.
• Complying with applicable legal obligations.
• Improving platform functionality and user experience.

We do not use your personal information for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

• Contractual necessity: Processing is required to provide the services described in our Terms and Conditions.
• Legitimate interests: We process data to maintain platform security and prevent fraud.
• Legal compliance: We may process data to fulfil legal and regulatory obligations.
• Consent: Where you have given explicit consent for specific communications.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share limited personal data with trusted providers solely to operate the platform:

• Korapay: Receives payment data to process Mobile Money deposits.
• Supabase: Our backend database and authentication provider.
• Vercel: Our frontend hosting provider.
• Email Service Provider: Used to deliver transactional notifications.
• Upstash Redis: Used for platform caching and rate limiting.

5.2 Legal Disclosure

We may disclose your information if required by law, court order, or governmental authority, or where necessary to protect the rights or safety of the platform and its users.

5.3 No Sale of Data

Assets Bridge does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

6. Data Retention

We retain your personal data for as long as your account is active or as reasonably necessary to provide our services. Financial transaction records are retained for a minimum of five (5) years. Upon account closure, data will be deleted or anonymised within a reasonable period, except where retention is required by law.

7. Data Security

Assets Bridge implements technical and organisational measures to protect your information, including:

• Secure authentication protocols and encrypted password storage.
• Email verification for all new accounts.
• Role-based access control limiting data access to authorised personnel only.
• Audit logging of all significant platform activity.
• Secure API validation and encrypted storage of sensitive credentials.
• Regular database backups and recovery procedures.

While we take all reasonable precautions, no digital system is entirely immune to risk. You are responsible for maintaining the confidentiality of your login credentials.

8. Cookies and Tracking

The platform may use session cookies to maintain your authenticated session and improve user experience. You may manage cookie preferences through your browser settings; however, disabling necessary cookies may affect platform functionality.

9. Your Rights

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update inaccurate information through your account settings.
• Deletion: You may request deletion of your account and associated data, subject to legal retention obligations.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us through the official Assets Bridge support channels.

10. Children's Privacy

Assets Bridge is not intended for persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that data from a person under 18 has been collected, we will promptly delete it and close the associated account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent platform notice. Continued use of the platform following notification constitutes your acceptance of the revised policy.

12. Contact Us

For questions, concerns, or data requests relating to this Privacy Policy, please contact us through the official Assets Bridge platform support channels.

Assets Bridge Investment Platform • Privacy Policy • Version 1.0 — June 2026