Privacy Policy | Halocard

This Privacy Policy describes how Halocard LLC ("Halocard," "we," "our," or "us") collects, uses, stores, and protects your personal information when you use our platform, website, mobile applications, and related services (collectively, the "Services").

By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

OUR COMMITMENT TO YOUR PRIVACY

At Halocard, privacy is a core principle, not an afterthought. We designed our platform to collect and use only the minimum amount of personal data necessary to provide our Services, comply with legal requirements, and protect against fraud.

What Makes Us Different:

We do not sell, rent, or share your personal information for advertising or marketing purposes. We do not obtain credit reports or credit scores for our platform services. We do not report your account activity to credit bureaus. We limit data collection to what is strictly necessary for identity verification, regulatory compliance, fraud prevention, and service delivery.

How Halocard Protects Your Transaction Privacy:

When you use Halocard virtual or physical cards, merchants only see a transaction from "Halocard"—not your primary bank or personal funding source. When you fund your Halocard account from your bank, your bank only sees a single transaction to "Halocard" for the amount you loaded—not the individual purchases you make with your cards.

This separation creates a privacy layer between your primary financial accounts and your spending activity, giving you control over what information is visible to merchants and banking institutions.

OUR SERVICE PROVIDERS

We work with carefully selected partners who help us deliver secure payment services and their privacy practices are governed by separate agreements and policies. While we maintain strict privacy standards for data we control, we cannot control how our partners handle information required for card issuance, payment processing and identity verification.

Card Issuing: Nimbus LLC d/b/a Third National Bank issues virtual and physical payment cards that you can access through Halocard.

Payment Processing: Coinflow Labs Limited processes payments for funding your Halocard account, including payment card transactions and bank transfers.

Identity Verification: Sum and Substance Ltd performs Know Your Customer (KYC) and identity verification services when required for specific card products.

Infrastructure and Security: Supabase Inc. provides cloud infrastructure and database services, including SOC 2 Type 2 compliance for data security and operational controls.

These service providers process your information to deliver services on our behalf and are contractually obligated to protect your information. We share only the information necessary for them to perform their specific functions.

INFORMATION WE COLLECT

We collect three types of information: information you provide to us, information we collect automatically, and information we receive from third parties.

1. Information You Provide

Account Registration: When you create a Halocard account, we collect your mobile phone number (required for SMS verification). Depending on the card product you request and applicable requirements, we may also collect your full legal name, email address, residential or business address, date of birth, and business information for business accounts.

Identity Verification: Certain card products require identity verification to comply with banking regulations and anti-money laundering laws. Depending on your jurisdiction and card product, we may collect government-issued photo identification, Social Security Number (SSN) or Tax Identification Number, proof of address documentation, and business formation documents for business accounts.

Payment Information: We collect information about payment methods you use to fund your account, including bank account details, card information, digital wallet information, cryptocurrency wallet addresses, and international payment method details.

Transaction Information: We collect details about your card usage, including transaction amounts, dates, times, and merchant information, spending patterns and account activity, and refunds, disputes, and chargebacks.

Communications: When you contact us, we collect the content of your messages, support inquiries, and feedback you provide.

2. Information We Collect Automatically

Device Information: We automatically collect device type and model, operating system, unique device identifiers, browser type and version, IP address and location data, and language preferences.

Usage Information: We collect how you interact with our Services, including pages viewed, features accessed, time spent, navigation paths, errors encountered, and session frequency.

Cookies and Tracking: We use cookies, web beacons, and similar technologies to recognize you, remember preferences, analyze usage, prevent fraud, and improve security. See our Cookies section below for more details and your choices.

3. Information from Third Parties

Identity Verification Services: Our identity verification provider may share verification results, fraud risk assessments, and sanctions screening results.

Financial Partners: Our card issuer and payment processor share information necessary to provide Services, including authorization data, account status, and compliance information.

Analytics Providers: Third-party analytics services help us understand how users interact with our platform.

HOW WE USE YOUR INFORMATION

To Provide Our Services:

Create and maintain your account
Process funding transactions and issue cards
Authorize and settle card transactions
Provide customer support
Send transaction confirmations and account notifications

For Security and Compliance:

Verify your identity when required by law or card product terms
Detect, prevent, and investigate fraud
Monitor for suspicious activity
Comply with financial regulations and reporting requirements
Respond to legal process and government requests

To Improve Our Services:

Analyze usage patterns and preferences
Fix technical issues and bugs
Develop new features
Optimize user experience

For Communication:

Send service notifications and security alerts
Respond to support inquiries
Notify you of policy changes
Send promotional communications (you can opt out)

HOW WE SHARE YOUR INFORMATION

We share your information only in limited circumstances and never sell it for advertising purposes.

With Service Providers: We share information with the service providers listed above only as necessary for them to perform their functions.

For Legal and Safety Reasons: We may share information to comply with laws, court orders, or legal process, respond to government requests, prevent fraud or security threats, protect our legal rights, or protect user safety.

In Business Transfers: If Halocard is involved in a merger, acquisition, or sale, your information may be transferred. We will notify you of any such change.

With Your Consent: We may share information with third parties when you authorize us to do so, such as when you connect third-party applications to your account.

Aggregated Data: We may share aggregated, de-identified, or anonymized information that cannot be used to identify you.

DATA SECURITY

We are committed to protecting your personal data from unauthorized access, loss, theft, misuse, disclosure, alteration and destruction.

We implement robust technical safeguards including, but not limited to, encryption of data in transit (TLS/SSL) and at rest, secure authentication protocols with mandatory multi-factor authentication, regular security testing and vulnerability assessments, and security audits to identify and mitigate risks.

While we strive to protect your information, no security system is completely impenetrable. You are responsible for safeguarding your account credentials, enabling two-factor authentication, protecting your devices, and promptly reporting any suspected unauthorized access.

DATA RETENTION

We retain your personal information only as long as necessary to provide Services, comply with legal obligations, and resolve disputes.

Retention Periods by Data Type:

Identity verification data: 5 years from account closure (required by financial regulations)
Transaction data and card information: 5 years from transaction date or account closure (required by payment regulations)
Funding and bank account information: 6 years from account closure (required by financial regulations)
Audit logs and compliance records: 3 years from creation (required by law)
Communications and support records: Retained as necessary for customer service and dispute resolution
Marketing data: Retained until you opt out or request deletion

When you close your account, we retain only what is required by law or necessary for legitimate business purposes, including fraud prevention, dispute resolution, and regulatory compliance.

YOUR RIGHTS AND CHOICES

You can access and update your information through your account settings or by contacting [email protected]. You may request deletion of your information (subject to legal retention requirements) or receive a portable copy of your data. To opt out of promotional communications, use the unsubscribe link in emails or update your account preferences—you cannot opt out of essential service communications.

California Residents: Under the CCPA, you have the right to know what information we collect, request deletion, and opt out of sale (we don't sell your information). Exercise these rights at [email protected] or +1 (323) 410-4555.

Other Jurisdictions: Additional rights may apply under local privacy laws. Contact [email protected] to learn more.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to provide and improve our Services, including essential cookies (for authentication and security), performance cookies (to understand usage), functionality cookies (to remember preferences), analytics cookies (including Google Analytics), and security cookies (to detect fraud).

Managing Cookies: Control cookies through your browser settings or device settings. Most browsers let you refuse or delete cookies, though this may affect functionality. For mobile devices, use "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android). To opt out of Google Analytics, install the add-on at https://tools.google.com/dlpage/gaoptout. Learn more at www.aboutcookies.org or www.allaboutcookies.org.

Our Services do not respond to Do Not Track signals, but you can control tracking through the methods above.

THIRD-PARTY SERVICES

Our Services may link to third-party websites or integrate with third-party applications. We do not control these third parties and are not responsible for their privacy practices. When you access third-party services, their privacy policies and terms apply.

Third-Party Integrations: If you connect third-party applications to your Halocard account, you authorize those applications to access certain information. Review their privacy policies before granting access.

CHILDREN'S PRIVACY

Our Services are not intended for anyone under 18 years of age. We do not knowingly collect personal information from individuals under 18. If we learn we have collected information from someone under 18 without parental consent, we will delete that information immediately.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements.

Your continued use of our Services after the effective date of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, stop using our Services and close your account.

CONTACT US

If you have questions about this Privacy Policy or our data practices, contact us:

Halocard LLC
30 N Gould St, STE R
Sheridan, WY 82801, USA

Privacy Inquiries: [email protected]
Customer Support: [email protected]
Phone: +1 (323) 410-4555

We will respond to your inquiry as soon as reasonably possible and within timeframes required by applicable law.

BY USING HALOCARD'S SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND SHARING OF YOUR INFORMATION AS DESCRIBED HEREIN.