PRIVACY POLICY

Last updated: [26.09.2026]

1. Introduction

Blockchain Innovations Inc respects your privacy and is committed to handling personal data responsibly and transparently.

This Privacy Policy explains how personal data may be collected, used, shared, stored and protected when you:

  • visit arcaveocard.com;

  • contact ARCAVEO;

  • request support;

  • subscribe to launch information;

  • create an account;

  • apply for an ARCAVEO Card; or

  • use ARCAVEO-related services.

2. Data Controller

For ARCAVEO website-related processing:

Blockchain Innovations Inc
Private Company Limited by Shares
Business Registration Number: 155777290

Aquilino de la Guardia Street, Ocean Business Plaza Building, Floor 23, Suite 23-01, 07096 Panama City

Email: info@arcaveocard.com

Support: support@arcaveocard.com

3. Information We May Process

Depending on how you use ARCAVEO, information may include:

Website Data

  • IP address;

  • browser and device information;

  • operating system;

  • language;

  • page activity;

  • timestamps;

  • referring website;

  • security logs; and

  • cookie identifiers.

Contact Data

  • name;

  • email address;

  • message;

  • correspondence; and

  • support history.

Account and Card Data

When card services become available:

  • legal name;

  • date of birth;

  • residential address;

  • nationality;

  • telephone number;

  • email address;

  • account identifiers;

  • card-related identifiers;

  • transaction information;

  • card-funding information;

  • digital-asset information; and

  • service history.

4. Identity Verification and KYC

ARCAVEO card services require identity verification.

ARCAVEO uses Sumsub for KYC and identity-verification services.

Depending on the verification process, information may include:

  • identity documents;

  • document images;

  • facial images;

  • liveness verification;

  • proof of address;

  • nationality;

  • date of birth;

  • verification results;

  • sanctions-screening results;

  • politically exposed person screening;

  • fraud indicators; and

  • other required compliance information.

Sumsub may also process personal data under its own applicable privacy terms.

5. Why We Process Personal Data

Personal data may be processed to:

  • operate and secure the website;

  • respond to enquiries;

  • provide support;

  • manage accounts;

  • provide launch information;

  • facilitate card applications;

  • complete KYC;

  • satisfy AML requirements;

  • conduct sanctions screening;

  • prevent fraud;

  • facilitate card services;

  • process or facilitate transactions;

  • maintain records;

  • comply with legal obligations;

  • investigate incidents; and

  • improve our services.

6. Legal Bases Where GDPR Applies

Where applicable, processing may be based on:

Contract
Where processing is necessary to provide requested services.

Legal Obligation
Where processing is required by law, compliance obligations or sanctions requirements.

Legitimate Interests
Including website security, fraud prevention, service administration and support.

Consent
For activities such as optional cookies, analytics or marketing where consent is required.

7. Sharing of Personal Data

Personal data may be disclosed where necessary to:

  • Sumsub;

  • card-programme providers;

  • issuing partners;

  • payment processors;

  • custodians;

  • conversion providers;

  • settlement providers;

  • compliance providers;

  • fraud-prevention providers;

  • hosting and cloud providers;

  • customer-support providers;

  • professional advisers;

  • auditors;

  • legal advisers;

  • regulators;

  • courts; and

  • law-enforcement authorities.

Blockchain Innovations Inc. does not sell personal data to advertisers.

8. International Transfers

Blockchain Innovations Inc. is based in Panama and ARCAVEO is intended to operate internationally.

Personal data may therefore be processed outside the user’s country of residence.

Where required, appropriate safeguards for international transfers will be used.

9. Data Retention

Personal data is retained only for as long as reasonably necessary for:

  • service provision;

  • contractual obligations;

  • legal obligations;

  • compliance;

  • fraud prevention;

  • accounting;

  • dispute resolution;

  • security; and

  • record keeping.

KYC and transaction information may be subject to longer statutory or programme-specific retention periods.

10. Security

Reasonable technical and organisational measures are used to protect personal data.

However, no internet-based system can be guaranteed to be completely secure.

11. Your Rights

Depending on applicable law, users may have rights including:

  • access;

  • correction;

  • deletion;

  • restriction;

  • objection;

  • withdrawal of consent;

  • data portability; and

  • complaint to a competent authority.

Requests may be sent to:

info@arcaveocard.com

Identity verification may be required before processing a request.

12. Marketing

ARCAVEO will send marketing communications only where permitted by applicable law.

Users may unsubscribe at any time.

13. Age

ARCAVEO card services are intended only for users aged 18 years or older.

14. Cookies

ARCAVEO uses cookies and similar technologies.

Please see our separate Cookie Policy.

15. Changes

This Privacy Policy may be updated where ARCAVEO services, providers, technologies or legal requirements change.

Contact

BLOCKCHAIN INNOVATIONS INC.

Aquilino de la Guardia Street, Ocean Business Plaza Building, Floor 23, Suite 23-01, 07096 Panama City

info@arcaveocard.com