Privacy Policy

BitBridge ("BitBridge," "we," "us," or "our") is committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, store, and share your personal information in connection with your use of the BitBridge platform and Bitcoin Savings Account (BSA) service.

By creating an account or using BitBridge's services, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree, please do not use BitBridge's services.

This policy applies to information collected through our website, account registration process, and ongoing account management. It does not apply to third-party websites or services linked from our platform.

We collect information you provide directly and information generated through your use of our platform.

Information you provide:

Information collected automatically:

• IP address and approximate geographic location
• Browser type, operating system, and device identifiers
• Pages visited, time spent on platform, and clickstream data
• Login timestamps and session activity

Information from third parties: BitBridge may receive information from identity verification services, compliance data providers, and fraud prevention tools used to satisfy KYC/AML obligations.

BitBridge uses collected information for the following purposes:

• Account management: To create and maintain your account, verify your identity, and process BSA setup and exit requests
• KYC/AML compliance: To meet legal obligations regarding identity verification and anti-money laundering monitoring
• Communications: To send account confirmations, deposit instructions, status updates, and responses to your inquiries
• Security: To detect fraud, unauthorized access, and other threats to account integrity
• Platform improvement: To analyze usage patterns and improve the functionality and user experience of our platform
• Legal obligations: To comply with applicable federal and state laws, regulatory inquiries, and court orders

BitBridge does not use your personal information for advertising, marketing profiling, or sale to data brokers. We do not share your data with advertisers.

BitBridge does not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: Third-party vendors who assist with identity verification, cloud infrastructure, payment processing, or communications — bound by confidentiality obligations
• Legal compliance: In response to a valid court order, subpoena, government investigation, or legal process requiring disclosure
• Fraud prevention: With fraud detection services or law enforcement when we have a good-faith belief that disclosure is necessary to prevent financial crime
• Business transfers: In connection with a merger, acquisition, or sale of substantially all of BitBridge's assets, where client information may be transferred as part of the transaction
• With your consent: In any other circumstances, only with your explicit prior consent

BitBridge retains personal information for as long as your account is active or as necessary to fulfill the purposes described in this policy, whichever is longer. Specific retention periods include:

• Account and identity data: Retained for a minimum of 5 years after account closure, as required by applicable financial regulations
• Transaction records: Retained for a minimum of 7 years to comply with federal recordkeeping requirements
• KYC/AML documentation: Retained as required by law, typically 5 years from the date of account closure
• Communications: Support correspondence is retained for 3 years from the date of the interaction

After applicable retention periods, personal information is securely deleted or anonymized. You may request deletion of your account data, subject to our legal obligations to retain certain records.

BitBridge implements industry-standard technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols
• Encrypted storage of sensitive data at rest
• Access controls limiting employee access to personal data on a need-to-know basis
• Password hashing using modern cryptographic standards
• Regular review of security practices and third-party service agreements

While BitBridge takes reasonable precautions, no security system is impenetrable. In the event of a data breach that materially affects your personal information, BitBridge will notify affected clients as required by applicable law.

You are responsible for maintaining the confidentiality of your account password. BitBridge will never ask for your password via email or phone.

You have the following rights regarding your personal information held by BitBridge:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may update inaccurate or incomplete information through your account dashboard or by contacting us
• Deletion: You may request deletion of your personal information, subject to legal retention obligations
• Portability: You may request a structured, machine-readable copy of your account data
• Objection: You may object to certain uses of your data, including direct marketing (which we do not engage in)

To exercise any of these rights, contact us at support@bitbridge.holdings. We will respond within 30 days. BitBridge reserves the right to verify your identity before processing requests.

BitBridge uses cookies and similar tracking technologies to operate and improve the platform. Types of cookies used include:

• Essential cookies: Required for account authentication, session management, and core platform functionality. These cannot be disabled.
• Analytics cookies: Used to understand how users navigate the platform, which pages are most visited, and where errors occur. This data is aggregated and anonymized.
• Preference cookies: Used to remember user settings such as language and display preferences.

BitBridge does not use advertising or targeting cookies. We do not allow third-party advertisers to place cookies on our platform.

You may disable non-essential cookies through your browser settings. Disabling essential cookies may prevent you from accessing your account.

BitBridge's services are intended exclusively for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor has provided us with personal information, we will promptly delete that information and close the associated account.

If you are a parent or guardian and believe your child has created a BitBridge account, please contact us immediately at support@bitbridge.holdings.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for which it is used
• Right to Delete: You may request deletion of personal information we hold, subject to legal exceptions
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights
• Right to Opt-Out of Sale: BitBridge does not sell personal information. No opt-out is necessary.

To submit a CCPA request, email support@bitbridge.holdings with the subject line "CCPA Privacy Request." We will respond within 45 days as required by law.

BitBridge may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email and update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of BitBridge's services following notice of changes constitutes acceptance of the updated policy.

For questions, requests, or concerns regarding this Privacy Policy or how we handle your personal information, please contact: