Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains what personal information Biertex LLC ("Biertex", "we", "us") collects, why we collect it, how we use it, and the rights you have. We comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other state privacy statutes where applicable.

1. Information We Collect

When you use Biertex, we collect:

Account data: legal name, email address, hashed password.
KYC data: if you submit verification — full legal name, government-issued ID type and number, and photographs of your ID documents.
Transaction data: deposits, withdrawals, wallet addresses, amounts, timestamps, and on-chain transaction hashes.
Technical data: IP address, browser type, device type, operating system, and access times.
Communication data: messages you submit through our support form or email.

2. How We Use Your Information

To create and manage your account.
To process deposits and withdrawals.
To verify your identity and comply with U.S. anti-money-laundering (AML) obligations under the Bank Secrecy Act (BSA).
To send transactional emails (verification codes, password resets, KYC updates, withdrawal notifications).
To detect, prevent, and investigate fraud, abuse, and security threats.
To comply with legal and regulatory requirements, including responses to lawful government requests.

3. Third-Party Service Providers

We share data with the following providers only as needed to operate the Platform:

Shieldz — processes deposits and receives your email address when you initiate a deposit.
Mailtrap — delivers transactional emails.
Render — hosts our backend servers.
Neon — hosts our database.
Cloudflare — hosts our website and DNS.

We do not sell your personal information.

4. Legal Basis for Processing

Contract: processing is required to provide the service you signed up for.
Legal obligation: AML/KYC requirements under U.S. federal and state law.
Consent: where you explicitly agree (e.g. optional marketing communications).
Legitimate interest: fraud prevention, platform security, and service improvement.

5. Data Retention

Account data is retained while your account is active.
KYC records and transaction data are retained for at least 5 years, as required under the Bank Secrecy Act and applicable state money-transmitter regulations.
After account closure, personal data is deleted or anonymised unless retention is legally required.

6. Security

We protect your data using:

Password hashing using bcrypt.
Encrypted connections (HTTPS/TLS) for all traffic.
Restricted access to KYC documents and personal data.
JWT-based authentication with short-lived tokens.
Rate limiting and monitoring of suspicious activity.

No system is 100% secure. If you suspect a breach of your account, contact us immediately at [email protected].

7. Your Rights (U.S. State Privacy Laws)

Depending on your state of residence, you may have the right to:

Know what personal information we collect and how we use it.
Access the personal information we hold about you.
Correct inaccurate personal information.
Delete personal information, subject to legal retention requirements (such as AML record-keeping).
Opt out of the sale or sharing of personal information — though we do not sell or share your data.
Non-discrimination for exercising your privacy rights.

To exercise these rights, email [email protected]. We will respond within the timeframe required by applicable state law (usually 45 days). We may need to verify your identity before processing the request.

8. Cookies and Local Storage

We use browser local storage to keep you logged in and to cache your preferences. We do not use third-party advertising cookies. We do not track you across other websites.

9. Children

Biertex is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal information, contact us and we will delete it.

10. International Data Transfers

Some of our service providers may process data outside the United States. Where required, we use appropriate safeguards for such transfers. By using the Platform, you consent to the transfer of data to these providers as described in this Policy.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email or notice on the Platform at least 7 days before they take effect.

12. Contact

Privacy questions: [email protected]