Legal

Privacy Policy

Effective Date: June 1, 2026  ·  Last Updated: June 1, 2026

1. Who We Are

RexGO ("RexGO," "we," "us," "our") provides a financial technology platform that helps users open and manage wallets for fiat currency and stablecoins, move funds between wallet types, and send funds to external bank accounts or blockchain wallet addresses. RexGO works with regulated and specialized third‑party providers to deliver identity verification, banking, payment processing, settlement, and compliance services.

2. Scope

This Privacy Policy explains how we collect, use, share, and protect personal information when you use the RexGO mobile application, websites, and related services (the "Services"), including onboarding, identity verification, wallet creation, transfers, customer support, fraud prevention, reconciliation, and compliance operations.

3. Information We Collect

We collect information in three ways: (A) you provide it, (B) we collect it automatically, and (C) we receive it from third parties.

A) Information You Provide

  • Account and profile information: name, email, phone number, date of birth, address, and other profile details you choose to provide.
  • Identity and business verification (KYC/KYB) information: identification details and documentation (e.g., government‑issued ID details), selfies/liveness checks, proof of address, and (where applicable) business details such as legal name, registration number, beneficial ownership information, and corporate documents.
  • Transaction and payment information: recipient details, bank account details, blockchain wallet addresses, transfer amounts, timestamps, references/notes, and related metadata needed to facilitate transfers and provide statements/receipts.
  • Communications: messages, emails, and other communications with us (including support requests), and any information you provide in surveys or feedback.

B) Information Collected Automatically

  • Device and app information: device type, operating system, browser type, app version, language, time zone, and diagnostic data.
  • Identifiers and signals: device identifiers, IP address, approximate location derived from IP, and security/fraud indicators (e.g., proxy/VPN signals).
  • Usage information: interaction data such as screens viewed, features used, clicks/taps, and event logs (e.g., OTP requested, verification started/completed, transfer initiated).

C) Information We Receive from Third Parties

  • Persona (KYC/KYB identity verification): verification outcomes and risk signals such as identity verification status, document verification results, liveness checks, fraud indicators, and KYB verification status (where applicable).
  • Bridge (fiat currency and stablecoin wallet services and settlement): wallet provisioning results, wallet status, transaction and settlement status, funding confirmations, and related operational data needed to provide wallet services and process transfers.
  • Rex Microfinance Bank ("RexMB") and other banking partners: account creation status, local verification requirements (where applicable), account status, and transaction confirmations.
  • Payment processors and rail providers: funding confirmations, chargeback/return events, settlement timing, and payment status updates.
  • Compliance and screening providers: sanctions/PEP screening results, adverse media flags, and transaction risk signals (including blockchain address screening and risk analytics where relevant).
  • Marketing/referral partners (where applicable): referral source data and campaign attribution information (where permitted by law and your settings).

4. How We Use Your Information

We use personal information to:

  • Provide and operate the Services — create and maintain your account; provision your wallets automatically after successful onboarding and verification; facilitate transfers; provide transaction history, receipts, statements, and notifications.
  • Verify identity and meet legal obligations — KYC/KYB, sanctions screening, fraud checks; comply with AML/CTF and other requirements; maintain records for audits and reporting.
  • Prevent fraud and keep the platform safe — detect suspicious activity, secure accounts, enforce limits, investigate incidents.
  • Improve, troubleshoot, and develop the Services — analytics, bug fixes, feature improvements.
  • Communicate with you — OTPs, security alerts, service messages, transaction updates, support.
  • Marketing (where permitted) — product updates and offers; opt‑out available.

5. How We Share Your Information

We do not sell your personal information. We share information only as needed to run the Services, comply with law, and protect users.

A) Service Providers and Partners

  • Persona (KYC/KYB): identity/business verification and fraud prevention.
  • Bridge (fiat and stablecoin wallet services and settlement): wallet provisioning, settlement and transfer processing, transaction updates.
  • RexMB and other banking partners: account provisioning, local verification requirements, local transaction processing.
  • Payment and settlement providers: funding, transfers, returns/chargebacks, reconciliation.
  • Infrastructure providers: hosting, cloud storage, security, analytics, customer support, monitoring.

We require service providers to use information only for the services they provide and to protect it consistent with law and contracts.

B) Legal, Compliance, and Safety

We may disclose information to comply with law or lawful requests, to protect RexGO and users, to investigate violations, and to prevent fraud/financial crime.

C) Business Transfers

If RexGO is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction subject to confidentiality protections and applicable law.

6. Cookies, Tracking, and Analytics

  • Website cookies: used for authentication, preferences, performance, analytics, and security. You can manage cookies through browser settings.
  • App analytics and crash reporting: used to improve stability and user experience; may include device/app identifiers and event data.
  • "Tracking" (Apple App Tracking Transparency): RexGO does not engage in cross‑app tracking for targeted advertising unless we clearly disclose it and obtain required permission. If we ever use tracking, you can control it via device settings and in‑app prompts.

7. Data Retention

We retain personal information as needed to provide the Services, comply with legal/regulatory obligations (including AML recordkeeping), resolve disputes, and maintain security. Some records (including identity verification and transaction logs) may be retained for multiple years as required by law or partner obligations.

8. Security

We use safeguards designed to protect information, including access controls, encryption in transit, monitoring, and vendor security reviews. No system is 100% secure.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, object to, or restrict certain processing, and to opt out of marketing. Contact [email protected]. We may verify your identity before fulfilling requests; some data may be retained as required by law.

10. International Data Transfers

RexGO may process/store information in countries other than where you live. Where required, we use appropriate safeguards consistent with applicable laws.

11. Children's Privacy

RexGO is not intended for children under 18 (or the age of majority where you live). We do not knowingly collect data from children.

12. Third‑Party Links and Services

Third‑party links/services are governed by their own policies. RexGO is not responsible for third‑party practices.

13. Changes to This Policy

We may update this policy. Material changes will be posted with an updated "Last Updated" date (and additional notice where required).

14. Contact Us

Privacy questions/requests: [email protected]