Privacy Policy

This Privacy Policy explains how CocoCard (the "Application", available at https://cococard.io) collects, uses, shares and protects personal information when you use our website and virtual card services.

Information we collect

• Name
• Email address
• Phone number
• Date of birth
• Nationality
• Identity / KYC information (such as identity documents and verification results)
• Residential address
• Account and transaction information (balances, card activity, funding and withdrawals)
• Device and security information (such as IP address, browser type and sign-in activity)
• Support communications you send us

How we use information

We use personal information to create and operate your account, verify your identity, provide card and payment services, prevent fraud, keep your account secure, provide support and meet our legal and regulatory obligations.

Google Sign-In and Google User Data

When you choose Continue with Google, CocoCard may receive basic account information from Google, such as your Google account identifier, name, email address, and profile picture where available.

This information is used only to:

• authenticate you
• create or connect your CocoCard account
• identify returning users
• pre-fill basic profile information
• maintain account security

CocoCard does not use Google Sign-In to access your Gmail messages, Google Drive files, Google Contacts, Google Calendar, or other private Google account content.

CocoCard does not sell Google user data. Google user data is not used for targeted advertising and is not used to determine creditworthiness.

CocoCard's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

How we share information

We share personal information only where necessary to operate CocoCard, with:

• identity / KYC verification providers
• card issuing and payment infrastructure providers
• authentication and cloud infrastructure providers
• fraud prevention and security providers
• regulators, courts or law enforcement where legally required

Each provider receives only the information required to provide its service. We do not sell personal information.

Security

We use appropriate technical and organizational safeguards, including encrypted communications, access controls, restricted administrative access, authentication controls, and logging and monitoring. Card numbers and security codes are displayed only through our card partner's secure environment. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Retention and deletion

We keep personal data only as long as reasonably necessary to provide our services, meet financial and compliance obligations, prevent fraud, resolve disputes, and comply with applicable legal and regulatory requirements.

To request deletion of your account and data, email privacy@cococard.io from the email address on your account. Some information may need to be retained where required by financial, anti-money-laundering (AML), KYC, regulatory or legal obligations; we will delete or anonymize it once those obligations end.

Your rights

You may request access to your personal data, correction of inaccurate data, deletion where legally permitted, and information about how your data is processed. Send requests to privacy@cococard.io. We may need to verify your identity before acting on a request.

Changes

We may update this policy from time to time. The "Last updated" date above shows when it last changed.

Contact

Privacy and support questions: privacy@cococard.io