USA/EU Privacy Policy

Introduction

This Privacy Policy explains how Africhange collects, uses, stores, shares, and protects personal information when you use our website, mobile apps, and services.

This Privacy Policy applies to users in the United States, the European Economic Area, and other supported jurisdictions, subject to any jurisdiction-specific supplements below.

Who We Are

Africhange is the controller of personal information processed in connection with the Africhange platform, except where another entity is identified in a specific product disclosure or where a third-party provider independently acts as controller under its own privacy notice. For some services, Africhange and its providers may separately determine the purposes and means of processing. In those cases, each party processes personal information under its own legal obligations.

Information We Collect

We may collect the following categories of personal information:

A. Identification and profile data

full name;
date of birth;
residential address;
nationality and residency information;
government-issued identification details;
selfie, photograph, or biometric-based verification outputs where permitted;
tax identification or similar numbers where legally required; and business registration and beneficial ownership information for business accounts.

B. Contact and account data

email address;
phone number;
login credentials and authentication details;
account preferences; and
customer support communications.

C. Financial and transaction data

bank account details;
card details or tokenized card references;
wallet addresses;
payout destination details;
transaction amounts, currencies, fees, exchange rates, timestamps, and counterparties;
source-of-funds, source-of-wealth, and purpose-of-transaction information; and
records of refunds, reversals, disputes, and account restrictions.

D. Technical and usage data

IP address;
device identifiers;
browser and operating system data;
app activity, logs, crash reports, and diagnostics;
cookies, SDKs, pixels, and similar technologies; and
geolocation or approximate location derived from device or network data, where permitted.

E. Compliance and risk data

sanctions screening results;
politically exposed person checks;
adverse media results;
fraud scores;
blockchain analytics data; and due diligence and investigation records.

How We Collect Information

directly from you during registration, onboarding, support, and transactions;
from your device and use of the Services;
from banks, payment processors, identity verification vendors, fraud prevention vendors, analytics vendors, and communications providers;
from Bridge and other providers involved in transaction execution and compliance;
from public sources, sanctions lists, and regulatory databases; and
from referrals, counterparties, and business partners where relevant.

Why We Use Personal Information

We use personal information to:

create and maintain your account;
verify identity and eligibility;
provide payment, transfer, remittance, wallet, conversion, and related services;
process, settle, confirm, monitor, and reconcile transactions;
prevent fraud, scams, account takeover, money laundering, terrorist financing, sanctions breaches, and other misuse;
comply with legal, regulatory, tax, audit, and recordkeeping obligations;
communicate with you about your account, transactions, support matters, service changes, and legal notices;
personalize and improve the Services;
troubleshoot, secure, and maintain our systems;
investigate complaints, disputes, and incidents; and
market our services where permitted and subject to your choices.

Legal Bases for EEA Processing

If you are in the EEA, we process your personal information on one or more of the following legal bases:

performance of a contract with you;
compliance with a legal obligation;
legitimate interests, such as fraud prevention, service improvement, network security, and internal administration;
consent, where required; and
establishment, exercise, or defense of legal claims.

We may share personal information with:

group companies and affiliates;
banking partners, payment processors, payout partners, card networks, and wallet or settlement providers;
Bridge and its affiliates, financial institution partners, and service providers where Bridge-powered features are used;
identity verification, sanctions screening, fraud prevention, analytics, cloud hosting, customer communication, and cybersecurity vendors;
auditors, insurers, legal advisers, and professional advisers;
law enforcement, regulators, tax authorities, courts, and government bodies;
counterparties or transaction participants where necessary to complete a transfer; and
acquirers or successors in a merger, financing, reorganization, sale, or transfer of assets.

We do not sell personal information for money. Where applicable law treats certain advertising or analytics disclosures as a "sale" or "sharing," we will honor applicable rights and choices.

Bridge-Specific Processing Disclosure

Where Africhange uses Bridge-powered functionality, your personal information may be shared with and processed by the relevant Bridge entity based on your place of residence and the service used. This may include:

identity and onboarding information;
account and authentication details;
wallet and transaction information;
sanctions, fraud, and compliance review data; and
records required for transaction processing, dispute handling, audits, and legal compliance.

Bridge may act as an independent controller or service provider/processor depending on the feature and legal context. In those cases, Bridge's own privacy policy, fee disclosures, and legal terms may also apply.

Cookies and Similar Technologies

We may use cookies, SDKs, pixels, and similar technologies to:

keep you signed in;
secure sessions;
remember preferences;
understand product usage;
measure performance;
improve support and troubleshooting; and
deliver or measure marketing where permitted.

You can manage certain cookie preferences through browser settings or our cookie tools where available.

Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to:

provide the Services;
maintain account history;
detect and prevent fraud;
resolve disputes;
enforce agreements;
comply with anti-money laundering, sanctions, financial services, tax, accounting, and legal recordkeeping requirements; and
establish or defend legal claims.

Retention periods may vary by data type and jurisdiction. Even after account closure, certain information may be retained where required or permitted by law.

International Transfers

Your personal information may be processed in countries other than your country of residence, including the United States and other jurisdictions where Africhange, Bridge, or our service providers operate.

Where required by law, we use appropriate safeguards for international transfers, such as contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption, access controls, monitoring, and vendor due diligence.

No system is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or port certain personal information, as well as the right to withdraw consent where processing is based on consent.

We may need to verify your identity before acting on a request. We may also deny or limit a request where permitted by law.

To exercise privacy rights, please contact us at [email protected] or through the support details listed in the app or website.

13.1 EEA Users

Subject to applicable law, you may have the right to:

access your personal information;
correct inaccurate information;
request deletion;
restrict processing;
object to certain processing;
receive data portability;
withdraw consent where processing is based on consent; and
lodge a complaint with a supervisory authority.

13.2 US Users

Depending on your state of residence, you may have rights to:

know or access personal information we process about you;
correct certain information;
delete certain information;
appeal a denial of your request; and
opt out of certain targeted advertising or regulated data sharing, where applicable.

Marketing Choices

You can opt out of promotional emails by using the unsubscribe link in the message or by contacting us. We may still send non-promotional communications related to your account, transactions, legal notices, and service operations.

Children

The Services are not intended for children, and we do not knowingly collect personal information from minors who are not legally eligible to use the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will revise the effective date and provide notice where legally required.

Contact Us

For questions, requests, or complaints regarding this Privacy Policy, contact Africhange using the contact details listed in the app or website.

Africhange Inc. 8 The Green STE A Dover, DE, 19901, United States

For data requests relating specifically to a Bridge-powered service, Africhange may direct you to Bridge or coordinate your request with Bridge where appropriate.

US Privacy Supplement

If you are a US resident, the following additional disclosures apply:

We may collect identifiers, commercial information, internet or network activity information, geolocation data, professional information for business users, and inferences for fraud or product optimization purposes.
We disclose these categories to service providers, contractors, banking and payments partners, Bridge, analytics providers, security vendors, and regulators for the purposes set out in this Policy.
We do not knowingly sell personal information of minors.
You may exercise applicable state privacy rights by contacting Africhange support.

EEA Privacy Supplement

If you are in the EEA:

The legal bases set out in Section 6 apply.
You may object to processing based on legitimate interests, subject to legal exceptions.
You may lodge a complaint with the data protection authority in your country of habitual residence, place of work, or place of alleged infringement.
Where Africhange relies on consent for optional processing, you may withdraw consent at any time without affecting prior lawful processing.