Privacy Policy
Last Updated: Feb 25, 2026
1. Introduction
Welcome to Curvy (“Curvy”, “we”, “our”, or “us”).
Curvy is a privacy-first crypto payments protocol that enables users to send and receive digital assets while reducing public wallet traceability, and preserving compliance capabilities where required.
This Privacy Policy explains how we collect, use, store, and protect information when you:
- Visit our website ( https://curvy.box )
- Use our web application
- Integrate our SDK
- Interact with Curvy Portals or related services
Curvy is designed to minimize personal data collection. However, certain information may be processed to operate our services lawfully and securely.
2. Data We Collect
We divide data collection into two categories:
2.1 Website & Communication Data
When you use our website, we may collect:
- Email address (if you contact us or subscribe)
- Name (if voluntarily provided)
- IP address
- Browser and device information
- Basic analytics data
- Cookies and usage metrics
This data is used strictly for communication, security, and website improvement.
We do not sell personal data.
2.2 Protocol & Application Data
Curvy operates as a blockchain infrastructure protocol. As such:
- We do not custody user funds.
- We do not control user funds.
- We do not require mandatory user registration for protocol interaction.
However, depending on usage, the following may be processed:
- Public blockchain data (transaction hashes, addresses, timestamps)
- Stealth deposit addresses generated by the protocol
- Portal configuration metadata
- Compliance verification status flags (where applicable)
- Aggregator execution metadata
- SDK integration identifiers (non-personal technical identifiers)
3. Compliance & Risk Monitoring
To support lawful use of the protocol and ecosystem integrations:
- Transactions routed through certain Curvy Portals may be screened using third-party blockchain analytics providers.
- Risk scoring may be applied to transactions.
- Sanctions and AML screening may occur depending on configuration.
Curvy does not perform traditional KYC by default.
If KYC is required for a specific integration, it will be clearly disclosed at the integration level.
4. Cookies & Analytics
We may use:
- Essential cookies (for functionality)
- Security cookies
- Anonymous analytics tools
You may disable non-essential cookies in your browser settings.
We do not use invasive tracking or behavioral advertising systems.
5. How We Use Data
We use collected information to:
- Maintain website security
- Improve user experience
- Prevent abuse and misuse of the protocol
- Comply with applicable legal obligations
- Respond to user inquiries
- Operate relayer infrastructure
We do not monetize user data.
6. Legal Basis (GDPR)
Where applicable under GDPR, we rely on:
- Legitimate interest (security, protocol integrity)
- Consent (newsletter subscription, optional cookies)
- Legal obligation (sanctions screening if required)
7. Data Retention
We retain:
- Communication data for as long as necessary to respond and maintain records
- Security logs for a limited operational period
- Compliance-related flags in accordance with legal requirements
Blockchain data is permanent and outside our control.
8. Data Sharing
We may share limited data with:
- Infrastructure providers (hosting, analytics)
- Compliance partners (blockchain analytics providers)
- Legal authorities if required by law
We do not share personal data for marketing purposes.
9. International Transfers
Your data may be processed in jurisdictions outside your country of residence.
Where required, we implement appropriate safeguards for international data transfers.
10. Your Rights
Depending on jurisdiction, you may have the right to:
- Access your personal data
- Request correction
- Request deletion (where applicable)
- Object to processing
- Withdraw consent
To exercise your rights, contact: [email protected]
Note: We cannot modify or delete public blockchain data.
11. Security
We implement technical and organizational measures to protect data, including:
- Encryption in transit
- Secure infrastructure environments
- Access controls
- Limited data collection by design
However, no system can guarantee absolute security.
12. Third-Party Links
Our website may contain links to external sites. We are not responsible for third-party privacy practices.
13. Children’s Privacy
Curvy services are not directed at individuals under 18.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised “Last Updated” date.
15. Contact
For privacy-related inquiries: