The world’s first fully AI-powered digital bank, trust, and insurance provider, delivering secure, scalable solutions through a single trust structure.

Privacy policy

Effective Date: March 6, 2025

1. Introduction

Welcome to BUBURUZA BANK. This Privacy Policy explains who we are ("BUBURUZA BANK," "we," "us," "our"), what personal information we collect when you use our services (via our website, web app, and Telegram interface), how we collect, use, share, and protect it, and the rights and choices you have with respect to your data.This policy applies to all users of BUBURUZA BANK’s services, including our neobank platform, wealth products, stablecoin infrastructure, and associated token services.

2. Information we collect

We collect the following categories of personal information:

Personal Identifiers: Name, email, Telegram handle, IP address, government-issued ID.
Account Data: KYC/KYB records, biometric verification data (e.g., facial scan), transaction logs, user preferences.
Financial Information: Fiat and crypto holdings, transaction history, referral earnings, staking activity, wallet metadata.
Usage Data: Browser/device type, usage patterns, Telegram interaction logs, AI usage metrics.
Token & Governance Data: Token balance, staking status, DAO participation, voting records.
Communications: Customer support tickets, AI chat interactions.

3. How we collect data

Directly from You: During account setup, transactions, KYC/KYB, or when contacting support.
Automatically: Via cookies, AI tools, on-chain data, and web telemetry.
From Third Parties: KYC vendors, blockchain analytics providers, and public blockchain records.

4. How we use tour data

We use your data to:

Open and maintain your account.
Facilitate fiat and crypto transactions.
Perform AI-driven onboarding, fraud detection, and investment optimization.
Support staking, token rewards, and DAO participation.
Provide support via AI agents.
Comply with global financial regulations.
Analyze user behavior to improve products and reduce risk.

5. Legal basis for processing

Our data processing is based on:

Contractual Necessity: To deliver services under our User Agreement.
Legal Obligations: Compliance with MiCA (EU), FINTRAC (Canada), and other regulations.
Legitimate Interests: Risk management, fraud detection, AI performance.
Consent: For marketing, biometric data, and certain AI features.

6. Data sharing

We may share your data with:

Licensed service providers (e.g., Fireblocks, KYC vendors).
Regulators and authorities where required.
Affiliated partners (e.g., Orechi for RWA tokenization, if you opt in).
Blockchain infrastructure where your wallet or staking activity is executed on-chain.We do not sell your data.

7. Security measures

Your data is protected through:

Biometric authentication and 2FA.
Blockchain-based custody.
Encryption (AES-256, SSL/TLS).
AI-monitored fraud detection.
MPC custody for digital assets.

No system is 100% secure. Users are responsible for protecting passwords, seed phrases, and tokens.

8. Data retention

We retain data only as long as necessary to fulfill our legal and operational obligations. Certain data (e.g., for AML compliance) may be retained for 5+ years post-account closure.

9. Your rights

Depending on your location, you may have the right to:

Access your data.
Correct inaccuracies.
Request deletion.
Port tokenized identity or asset data.
Object to certain uses (e.g., automated profiling).
Opt out of marketing communications.

Contact: support@buburuza.io to make a request.

10. Cookies & On-Chain Analytics

We use cookies and on-chain metadata tracking to:

Analyze platform usage.
Enhance onboarding.
Track referral links and token movements.

You can manage cookie preferences in your browser.

11. Children’s privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal data from minors. We use biometric and KYC controls to enforce age limits.

12. International data transfers

Your data may be processed in:

EU (MiCA)
Canada (FINTRAC)
Union of Comoros (Offshore License)
U.S. (Reg A+ compliance coming soon)

Safeguards are in place where required by law.

13. Changes to this policy

We may revise this Privacy Policy. If we make significant changes, we will notify you via platform notification or email. Continued use constitutes acceptance.Last Updated: March 6, 2025