Privacy Policy

This Privacy Policy applies to the coll8ral platform at coll8ral.com and related environments (including dev.coll8ral.com). We are committed to transparency and to handling data consistent with our non-custodial, compliance-oriented design.

You provide: account information (name, email), broker affiliation, preferences, and support communications.

Verification: identity verification results from our KYC provider (Sumsub). We store status and audit metadata — not government ID images in our application database. Sanctions screening results from TRM Labs.

Automatically: device/browser type, IP address, session data, cookies required for authentication, and usage logs for security and reliability.

On-chain: public XRPL addresses you link and public ledger data. We do not put PII on-chain.

• Provide and secure the Services (accounts, onboarding, transaction preparation)
• Comply with KYC/AML, sanctions, and securities-related obligations
• Detect fraud and maintain audit logs for sensitive operations
• Send transactional and security notifications
• Improve reliability and fix defects (aggregated analytics where used)

We do not sell your personal information.

We may share information with:

• Service providers (hosting, database, email, KYC, sanctions screening, XRPL infrastructure) under contract
• LoanBrokers you interact with, as needed to operate white-labeled Services
• Authorities when required by law, subpoena, or regulatory request
• Successors in a merger or acquisition, with notice where required

We use encryption in transit (HTTPS/TLS), access controls, row-level database security, and audit logging. We do not store end-user private keys or seed phrases. No method of storage or transmission is 100% secure; you are responsible for protecting your account credentials and wallet.

We retain data while your account is active and as required by law (including BSA/AML recordkeeping for KYC-related metadata and transaction audit trails). Blockchain records are permanent and public.

Depending on your jurisdiction, you may request access, correction, deletion, or portability of personal information, subject to legal retention requirements. California residents: we do not sell personal information. Contact privacy@coll8ral.com — we respond within 30 days where applicable.

Essential cookies and session tokens are required for sign-in. We do not use third-party advertising cookies. You may control cookies in your browser; disabling essential cookies may prevent use of the Platform.

The Platform is not intended for anyone under 18. We do not knowingly collect data from children.

Data may be processed in the United States. By using the Platform from other regions, you consent to transfer and processing under US law.

We may update this policy. Material changes will be communicated by email or in-product notice at least fifteen (15) days before taking effect.

Privacy: privacy@coll8ral.com
Support: support@coll8ral.com
Support page · Terms of Service