This Privacy Policy explains how the we3wire platform ("we", "us", "our") collects, uses, shares, and protects your personal information when you access or use we3wire.com and its services. By using the Platform, you consent to the practices described in this policy.

We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and other applicable privacy regulations.

We collect two categories of information:

Information You Provide Directly to Us

We collect only the minimum information necessary to operate the Platform:

• Email address and password — for account creation and login
• Name and basic contact details — for account identification
• Communications — support requests, emails, and any other communications you send us at contact@we3wire.com

Information Collected by Our Infrastructure Partners on Our Behalf

For identity verification (KYC for individuals, KYB for businesses), we3wire does not collect or store your identity documents or sensitive personal information directly. Instead, when you proceed through the verification step, you are redirected to a secure hosted verification flow powered by Persona on behalf of Bridge.xyz. All identity data — including government-issued ID, date of birth, address, business registration documents, UBO information, and source of funds — is submitted by you directly to Bridge.xyz/Persona and is governed by Bridge.xyz's Privacy Policy (bridge.xyz/legal).

If Bridge.xyz requires additional documentation from you during or after onboarding (for example, proof of address, source of funds statements, or supporting business documents), we3wire may act as a communication relay — forwarding Bridge.xyz's request to you by email and transmitting your response documents to Bridge.xyz on your behalf. In such cases, we3wire handles these documents solely to facilitate the communication and does not retain them beyond what is necessary for that purpose.

Financial and Transaction Information

We receive transaction-level data from Bridge.xyz (such as deposit amounts, transfer records, account balances, and fee records) in connection with your use of the Platform. This data is used to display your account activity in the we3wire dashboard. Card payment data processed via Stripe is handled exclusively by Stripe, Inc. and is never transmitted to or stored on we3wire servers.

Technical Information

We automatically collect: IP address, device type, browser information, cookies, session data, and login timestamps, for the purposes of platform security, fraud detection, and service improvement.

We use your information for the following purposes:

• Account management — to create and manage your account, communicate with you, and provide customer support
• Service delivery — to provide access to virtual accounts, wallets, and payment services via Bridge.xyz and Stripe
• Transaction display — to show your account activity, balances, and transaction history in your dashboard
• Compliance facilitation — to relay KYC/KYB document requests and responses between you and Bridge.xyz when required
• Fraud and risk management — to detect and prevent unauthorised access, fraud, and financial crimes at the platform level
• Regulatory compliance — to comply with applicable laws, regulations, court orders, and requests from regulatory and law enforcement authorities
• Platform improvement — to analyse usage patterns and improve our platform and services

The legal bases for processing your data (where GDPR applies) are: performance of a contract, compliance with a legal obligation, our legitimate business interests, and your consent where separately obtained.

We share your personal information with the following categories of third parties:

• Bridge.xyz — When you use the Banking & Payment Infrastructure Services, you are directed to Bridge.xyz's hosted KYC/KYB flow (Persona) where you submit your identity information directly to Bridge.xyz. Bridge.xyz acts as an independent data controller for that data. Bridge.xyz may share information with us as their platform partner in connection with your account status. Bridge.xyz's Privacy Policy is available at bridge.xyz/legal.
• Stripe, Inc. — We share relevant account information with Stripe for the purposes of card payment processing, connected account management, and fraud prevention. When you provide personal data in connection with we3wire's card payment services, Stripe receives and processes that data in accordance with Stripe's Privacy Policy (stripe.com/privacy). Our payment processor may also obtain information from credit agencies to verify your identity.
• Regulatory and Law Enforcement Authorities — We will disclose your information to regulatory bodies, law enforcement agencies, or courts where required by law, court order, or legal process, including for AML/CTF reporting obligations such as SAR (Suspicious Activity Report) filings.
• Service Providers — We may engage selected third-party service providers (hosting, security, analytics, legal, financial advisors) who access your data only to the extent necessary to perform services on our behalf, and who are bound by confidentiality obligations.

We do not sell your personal data to third parties. We do not share your data for advertising or marketing purposes without your explicit consent.

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to legal and regulatory retention obligations
• Right to restriction — to request that we restrict processing of your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time

Please note that some of these rights may be limited where we are required to retain data by applicable law. For rights relating to identity and KYC/KYB data submitted to Bridge.xyz, you should contact Bridge.xyz directly at privacy@bridge.xyz. To exercise rights relating to data held by we3wire, contact contact@we3wire.com.

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information (we do not sell personal information).

We use the following types of cookies:

• Essential cookies — necessary for the Platform to function, including session management and security
• Analytics cookies — to understand how users interact with the Platform and improve our services

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

We implement industry-standard technical and organisational security measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews. Identity verification data is handled directly by Bridge.xyz/Persona and is never stored on we3wire servers. Card payment data is handled exclusively by Stripe, Inc. and is never stored on we3wire servers. Stripe is PCI DSS compliant.

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and to notify us immediately at contact@we3wire.com if you suspect any unauthorised access to your account.