Privacy Policy

Effective date: October 2026

Personal Information We Collect

We collect information that relates to you ("Personal Data") in connection with your access to the Website, our Services, or otherwise in the context of our relationship with you. The types of Personal Data that we may obtain from you may include:

Biographical Data, including:

  • Name
  • Email Address
  • Phone Number
  • Country
  • Full Address
  • Date of Birth

CardCashGo Account Details, including:

  • Username
  • User Profile Information in the "Bio" section
  • Profile Picture
  • Joined Date
  • Default Currency
  • Time Zone
  • Default Language
  • Your Communication History with us, our support teams.

CardCashGo Account Activity, including:

  • Transaction and trading History including history of trade communications
  • Account Status
  • Withdrawal Requests

Data Relating to Your Digital Asset Wallet, including:

  • Public Keys
  • Wallet Balance
  • Transactions Received/Sent (historical only)

Data Collected in Connection with Know Your Customer (KYC) Compliance for Withdrawals, including:

  • Government-Issued ID
  • Proof of Address
  • Photographs or Video, if you provide them to us for verification

Device and Website Usage Data, including:

  • IP Addresses
  • Cookie ID and/or other device identifiers
  • Information relating to your access to the Website, such as device characteristics, date & time
  • Language preferences
  • Information on actions taken while accessing the Website (e.g., login attempts, withdrawal submissions)

Mobile Application Usage Data, including:

  • Session data: IP address, version of the operating system, brand and model of the device, unique identifiers of the device, browser used, information about the time the Application was accessed, name and parameters of the network connection (for security and fraud prevention during withdrawals).

When you use the peer-to-peer marketplace, we also collect trade-related data, including offers you create, trades you open, escrow and release records, trade chat messages and attachments, disputes, reviews and referral or ambassador information.

How We Use Your Data

The business purposes for which we collect, use, retain, and share your Personal Data are limited to:

To Provide Our Services through Operating the Website and App, including to:

  • Create and maintain your account;
  • List offers, open peer-to-peer trades, hold crypto in escrow and release it when a trade completes;
  • Deliver trade messages and notifications, and help resolve trade disputes;
  • Authenticate your identity and access to your account for verification;
  • Facilitate deposits and withdrawals of Digital Assets;
  • Communicate with you regarding your account, trades, deposits and withdrawals;
  • Perform KYC or other compliance reviews required for trading and withdrawals;
  • Compare information for accuracy and verification purposes.

To Manage Risk and Protect You, Other Persons, and the Services.

This includes fraud detection and preventing unauthorized access to accounts, trades and withdrawals.

To Comply with Our Policies and Obligations, including but not limited to Disclosures and Responses in Response to Any Requests from Law Enforcement Authorities and/or Regulators in Accordance with Any Applicable Law, Rule, Regulation, Judicial or Governmental Order, Regulatory Authority of Competent Jurisdiction, Discovery Request, or Similar Legal Process.

This is essential for sanctions compliance and escheatment of dormant assets.

To Resolve Disputes, Troubleshoot Problems, or Provide Customer Service.

To Operate and Improve Our Business.

This includes internal operations, service reliability and measuring how our Services are used.

We only send marketing messages to users who have opted in, and you can change your marketing preferences at any time in your account settings. We may also process Personal Data for other purposes based upon our legitimate business interests or your consent when required by applicable law.

Sources from Which We Collect Personal Data

We collect Personal Data from:

  • Directly from you: When you access the Website, open trades, submit deposit or withdrawal requests, or communicate with us.
  • From service providers and/or data processors: Who assist in verification, processing transactions, or security at our direction.
  • From third-parties: Who help verify identity, prevent fraud, or comply with legal obligations (e.g., sanctions screening).
  • From other users: When another trader interacts with you, for example by opening a trade on your offer, sending you trade messages or leaving a review.

How We Share Data

Under limited circumstances, we may disclose Personal Data to:

  • Service providers and/or data processors: To perform functions on our behalf, such as identity verification, transaction processing, or customer support.
  • Financial institutions: Involved in facilitating deposits and withdrawals.
  • Other third-parties for business or legal purposes:
    • To comply with legal, regulatory, or contractual obligations (e.g., court orders, subpoenas, or sanctions reporting);
    • To establish, exercise, or defend legal claims;
    • In response to government agency requests (e.g., law enforcement);
    • To enforce our User Agreement or internal policies;
    • To prevent harm or financial loss in investigations of illegal activity;
    • To support audit and compliance functions, or in connection with a potential business transfer.

When you trade, the other party to your trade can see the information needed to complete it, such as your username, trade messages and payment details you choose to share. We do not sell your Personal Data.

Cookies and Online Advertising

Our Website uses cookies and tracking technologies for essential functions including security, analytics, fraud detection and prevention, traffic management, authentication and session management. For more information, refer to our Cookie Policy.

You can control cookies at the browser level, but rejecting them may limit access to account and trading features.

Data Retention

After account deletion, uploaded identity documents and associated verification records are retained privately for 365 days for fraud, identity-theft and account-takeover investigations. Only authorized administrators can access these retained records, and access is audited. Access ends at the retention deadline; the files and verification records are then erased automatically.

We retain Personal Data only for the period necessary to provide our Services or as required by applicable law — typically 5–7 years from last transaction or account closure (jurisdiction-specific). Once it is no longer needed for these purposes, we will delete or anonymize your Personal Data. Dormant accounts may be subject to escheatment as unclaimed property.

Data Security

We have implemented safeguards to protect Personal Data against loss, misuse, and unauthorized access. However, no system is completely secure, and transmission over the Internet carries inherent risks.

Children Under 18 Years of Age

The Website and Services are not intended for children under 18. We do not knowingly collect data from children under 18. If we learn of such a collection, we will delete it immediately. Please report underage use of CardCashGo to support@cardcashgo.app.

Modifications to the Privacy Notice

We may update this Notice for legal reasons or to reflect changes to our Services. We will notify you by email or prominent notice on the Website. Continued access signifies acceptance.

Contact Us

For questions about this Notice or privacy inquiries, contact us at support@cardcashgo.app.