Privacy Policy

Last Updated: Feb 25, 2026

1. Introduction

Welcome to Curvy (“Curvy”, “we”, “our”, or “us”).

Curvy is a privacy-first crypto payments protocol that enables users to send and receive digital assets while reducing public wallet traceability, and preserving compliance capabilities where required.

This Privacy Policy explains how we collect, use, store, and protect information when you:

  • Visit our website ( https://curvy.box )
  • Use our web application
  • Integrate our SDK
  • Interact with Curvy Portals or related services

Curvy is designed to minimize personal data collection. However, certain information may be processed to operate our services lawfully and securely.

2. Data We Collect

We divide data collection into two categories:

2.1 Website & Communication Data

When you use our website, we may collect:

  • Email address (if you contact us or subscribe)
  • Name (if voluntarily provided)
  • IP address
  • Browser and device information
  • Basic analytics data
  • Cookies and usage metrics

This data is used strictly for communication, security, and website improvement.

We do not sell personal data.

2.2 Protocol & Application Data

Curvy operates as a blockchain infrastructure protocol. As such:

  • We do not custody user funds.
  • We do not control user funds.
  • We do not require mandatory user registration for protocol interaction.

However, depending on usage, the following may be processed:

  • Public blockchain data (transaction hashes, addresses, timestamps)
  • Stealth deposit addresses generated by the protocol
  • Portal configuration metadata
  • Compliance verification status flags (where applicable)
  • Aggregator execution metadata
  • SDK integration identifiers (non-personal technical identifiers)
Important: Blockchain transactions are public by nature. Curvy enhances privacy through cryptographic mechanisms but does not make blockchain activity invisible.

3. Compliance & Risk Monitoring

To support lawful use of the protocol and ecosystem integrations:

  • Transactions routed through certain Curvy Portals may be screened using third-party blockchain analytics providers.
  • Risk scoring may be applied to transactions.
  • Sanctions and AML screening may occur depending on configuration.

Curvy does not perform traditional KYC by default.

If KYC is required for a specific integration, it will be clearly disclosed at the integration level.

4. Cookies & Analytics

We may use:

  • Essential cookies (for functionality)
  • Security cookies
  • Anonymous analytics tools

You may disable non-essential cookies in your browser settings.

We do not use invasive tracking or behavioral advertising systems.

5. How We Use Data

We use collected information to:

  • Maintain website security
  • Improve user experience
  • Prevent abuse and misuse of the protocol
  • Comply with applicable legal obligations
  • Respond to user inquiries
  • Operate relayer infrastructure

We do not monetize user data.

6. Legal Basis (GDPR)

Where applicable under GDPR, we rely on:

  • Legitimate interest (security, protocol integrity)
  • Consent (newsletter subscription, optional cookies)
  • Legal obligation (sanctions screening if required)

7. Data Retention

We retain:

  • Communication data for as long as necessary to respond and maintain records
  • Security logs for a limited operational period
  • Compliance-related flags in accordance with legal requirements

Blockchain data is permanent and outside our control.

8. Data Sharing

We may share limited data with:

  • Infrastructure providers (hosting, analytics)
  • Compliance partners (blockchain analytics providers)
  • Legal authorities if required by law

We do not share personal data for marketing purposes.

9. International Transfers

Your data may be processed in jurisdictions outside your country of residence.

Where required, we implement appropriate safeguards for international data transfers.

10. Your Rights

Depending on jurisdiction, you may have the right to:

  • Access your personal data
  • Request correction
  • Request deletion (where applicable)
  • Object to processing
  • Withdraw consent

To exercise your rights, contact: [email protected]

Note: We cannot modify or delete public blockchain data.

11. Security

We implement technical and organizational measures to protect data, including:

  • Encryption in transit
  • Secure infrastructure environments
  • Access controls
  • Limited data collection by design

However, no system can guarantee absolute security.

12. Third-Party Links

Our website may contain links to external sites. We are not responsible for third-party privacy practices.

13. Children’s Privacy

Curvy services are not directed at individuals under 18.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised “Last Updated” date.

15. Contact

For privacy-related inquiries: